BuilderIO vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20263

Newest CVEs

• CVE-2026-92781

  Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributes

  BuilderIO · @builder.io/sdk-react

  Medium5.3
• CVE-2026-92779

  Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings

  BuilderIO · @builder.io/sdk-react

  High7.2
• CVE-2026-82286

  gpt-crawler Arbitrary File Write via outputFileName Parameter

  BuilderIO · gpt-crawler

  High8.8
• CVE-2023-2307

  Cross-Site Request Forgery (CSRF) in builderio/qwik

  builderio · builderio/qwik

  Medium4.7
• CVE-2023-1283

  Code Injection in builderio/qwik

  builderio · builderio/qwik

  Critical10.0
• CVE-2023-0410

  Cross-site Scripting (XSS) - Generic in builderio/qwik

  builderio · builderio/qwik

  Medium6.1