How to fix CVE-2023-1283?

Within 24 hours: Identify all affected systems running GitHub repository builderio/qwik and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

Is Qwik affected by CVE-2023-1283?

Organizations using GitHub repository builderio/qwik face critical risk from CVE-2023-1283, a code injection vulnerability rated CVSS 10.0. Successful exploitation could allow attackers to execute arbitrary code or commands on affected systems, potentially leading to full system compromise.

CVE-2023-1283

CRITICAL

2023-03-08 [email protected]

GHSA-9wf9-qvvp-2929

10.0

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 13, 2026 - 19:30 vuln.today

PoC Detected

Mar 13, 2026 - 19:21 vuln.today

Public exploit code

Patch Released

Mar 13, 2026 - 19:21 nvd

Patch available

CVE Published

Mar 08, 2023 - 22:15 nvd

CRITICAL 10.0

Description

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.

Analysis

Code injection in Qwik framework before 0.21.0. PoC and patch available.

Technical Context

CWE-94.

Affected Products

['Qwik < 0.21.0']

Remediation

Update.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.3

CVSS: +50

POC: +20

CVE-2023-1283 vulnerability details – vuln.today

Back

CVE-2023-1283

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2023-1283

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code