CVE-2026-106101

Name of the Vulnerable Software and Affected Versions Quasar Framework versions prior to 2.32.2

Description The openURL() utility in ui/src/utils/open-url/open-url.js incorrectly trusts window.SafariViewController in iOS environments. When components like QEditor, QSelect, or QChatMessage render attacker-controlled HTML, a named SafariViewController element can be created. This triggers browser named-property resolution, replacing the native bridge object. Consequently, calling isAvailable() on this element causes a TypeError, which disrupts external navigation, login redirects, and payment redirects.

Recommendations Update to version 2.32.2.