Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect parsing of certain Content-Type headers. This issue has been patched in version 1.12.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 2 | Disclosure1General1 |
| 2026-06-19 | 1 | Disclosure1 |
🟠 Oj (Ruby gem), Uninitialized Stack Memory Read / Out-of-Bounds Read, #CVE-2026-25155 (Medium) -DC-Jun2026-508 https://dailycve.com/oj-ruby-gem-uninitialized-stack-memory-read-out-of-bounds-read-cve-2026-25155-medium-dc-jun2026-508/
Post summary
The snippet announces CVE-2026-25155, a memory read vulnerability in the Ruby Oj gem, without providing PoC, exploit, active attack, patch, or false‑positive information.
CVE-2026-25155 Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isContentType causes incorrect parsing of certain… https://www.cve.org/CVERecord?id=CVE-2026-25155
Post summary
The post notes a typo in Qwik's regular expression that leads to incorrect parsing prior to v1.12.0, but offers no proof of concept, exploit code, patch, or evidence of active exploitation.
CVE-2026-25155 Content-Type Header Parsing Vulnerability in Qwik Framework Before 1.12.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25155
Post summary
A new Content-Type header parsing vulnerability has been disclosed in Qwik Framework versions prior to 1.12.0, with details available on the provided Vulmon link.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | qwik | qwik | - | node.js | - |