VI
Product
vite-plus
by vitejs · last CVE Oct 20, 2026
11
CVEs
0
On KEV
7.5
Max CVSS
7
New 30D
Severity mix
Critical 0High 3Medium 7Low 1
Watch

Add vite-plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112942
7.5
1%
Oct 20
launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
Affected: < 1.1.0
CVE-2026-39364
7.5
2%
Apr 7
Vite has a `server.fs.deny` bypass with queries
Affected: < 0.1.16
CVE-2026-39363
7.5
3%
Apr 7
Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
Affected: < 0.1.16
Showing 3