Vitest.dev - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-14.

Products

• Vitest - 3 CVEs

Newest CVEs of Vitest.dev

• CVE-2026-47429 - CVSS 9.8 (critical), 2026-07-14: Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for…
• CVE-2025-24964 - CVSS 9.7 (critical), 2025-02-04: Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while…
• CVE-2025-24963 - CVSS 7.5 (high), 2025-02-04: Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system.…