← All advisories

Medium severity6.1NVD Advisory· Published Jan 20, 2023· Updated Jun 17, 2026

CVE-2023-0410

CVE-2023-0410

Description

Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@builder.io/qwiknpm	< 0.16.2	0.16.2

Affected products

3

Qwik/Qwik
cpe:2.3:a:qwik:qwik:*:*:*:*:*:node.js:*:*
Range: <0.16.2
ghsa-coords
pkg:npm/%40builder.io/qwik
Range: < 0.16.2
Builderio/Builderio/qwikv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151anvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-hm7f-rq7q-j9xpghsaADVISORY
huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578envdPermissions RequiredThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2023-0410ghsaADVISORY

News mentions

0

No linked articles in our index yet.