VI
Product
vite
by vitejs · last CVE Oct 20, 2026
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
8.3
Max CVSS
6
New 30D
Severity mix
Critical 0High 9Medium 13Low 1
Watch

Add vite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31125
In wildKEV
7.5
66%
Mar 31
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Affected: >= 6.2.0, < 6.2.4; >= 6.1.0, < 6.1.3; >= 6.0.0, < 6.0.13; >= 5.0.0, < 5.4.16; < 4.5.11
Showing 1