Vite-plugin-react (Vitejs) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-12-16. Vendor: Vitejs.

CVEs of Vite-plugin-react

• CVE-2025-68155 - CVSS 7.5 (high), 2025-12-16: @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Prior to version 0.5.8, the `/__vite_rsc_findSourceMapURL` endpoint in…
• CVE-2025-67489 - CVSS 9.8 (critical), 2025-12-09: @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the…