CVE-2026-106102 - Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()
CVE ID :CVE-2026-106102 Published : Oct. 6, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in ui/src/plugins/meta/Meta.js used getAttr() to...