Vulnerabilities

TI-2026-34992 CVE-2026-47429 · GHSA-5xrq-8626-4rwp

Vitest: Arbitrary file can be read and executed when Vitest UI server is listening

HIGH 82

Vitest is a testing framework powered by Vite.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01028 Published 2026-07-14 Fixed in 3.2.5, 4.1.0 +1 CWE-22

TI-2025-18643 CVE-2025-24963 · GHSA-8gvc-j273-4wm5

HIGH 68

Vitest is a testing framework powered by Vite.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02403 Published 2025-02-04 Fixed in 2.1.9, 3.0.4 CWE-22

TI-2025-18644 CVE-2025-24964 · GHSA-9crc-q9x8-hgqq

HIGH 76

Vitest is a testing framework powered by Vite.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00682 Published 2025-02-04 Fixed in 1.6.1, 2.1.9 +1 CWE-1385