@vitest vulnerabilities
4 published CVEs name @vitest among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112950
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
vitest-dev · vitest
Medium5.9 - CVE-2026-112949
Vitest: Code injection via unauthenticated manual mock registration
vitest-dev · vitest
Medium4.7 - CVE-2026-112948
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
vitest-dev · vitest
Medium6.5 - CVE-2026-84373
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
vitest-dev · vitest
Medium5.9