Vitest.dev Vitest
2 CVEs affecting Vitest.dev Vitest. Latest disclosed: 2025-02-04. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-24964 | Critical | 9.6 | 2025-02-04 | Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest… |
CVE-2025-24963 | Medium | 5.9 | 2025-02-04 | Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Espe… |