Vitest-Dev

6 CVEs across 1 Vitest-Dev products. Browse Vitest-Dev vulnerabilities, severities, and proof-of-concept exploits.

Vitest-Dev products with known CVEs

ProductCVEs
Vitest6
Vitest-Dev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73653Critical9.42026-08-13Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreensh…
CVE-2026-53633Critical9.82026-07-14Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp() API that forwarded raw Chro…
CVE-2026-47429Critical9.82026-07-14Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /__vites…
CVE-2026-47428Critical9.62026-07-14Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /__vitest_test__/ with the otelCarrier quer…
CVE-2025-24964Critical9.62025-02-04Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest…
CVE-2025-24963Medium5.92025-02-04Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Espe…