| Package | Affected versions | Patched versions |
|---|---|---|
| qwik | < 1.19.1 | 1.19.1 |
| @builder.io/qwik | < 1.19.1 | 1.19.1 |
qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP request. Affects any deployment where require() is available at runtime.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free