Vulnerabilities

TI-2026-38634 CVE-2026-53571 · GHSA-fx2h-pf6j-xcff

Vite: `server.fs.deny` bypass on Windows alternate paths

HIGH 69

Vite is a frontend tooling framework for JavaScript.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00577 Published 2026-06-22 Fixed in 8.0.16, 7.3.5 +2 CWE-200

TI-2026-29828 CVE-2026-41211 · GHSA-33r3-4whc-44c2

HIGH 72

Vite+ is a unified toolchain and entry point for web development.

CVSS 4.0HIGH 8.4 Local No auth No interaction EPSS 0.00311 Published 2026-04-23 Fixed in 0.1.17 CWE-22

TI-2026-28352 CVE-2026-39365 · GHSA-4w7w-66w2-5vf9

HIGH 69

Vite is a frontend tooling framework for JavaScript.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00914 Published 2026-04-07 Partial fix · 8.0.5, 7.3.2 +2 CWE-22

TI-2026-28351 CVE-2026-39364 · GHSA-v2wj-q39q-566r

HIGH 69

Vite is a frontend tooling framework for JavaScript.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.02259 Published 2026-04-07 Partial fix · 8.0.5, 7.3.2 +1 CWE-180

TI-2026-28350 CVE-2026-39363 · GHSA-p9ff-h696-f583

HIGH 75

Vite is a frontend tooling framework for JavaScript.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.03396 Published 2026-04-07 Partial fix · 8.0.5, 7.3.2 +2 CWE-200