MO
Product
mocker
by @vitest · last CVE Oct 20, 2026
3
CVEs
0
On KEV
5.9
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add mocker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112950
5.9
0%
Oct 20
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
Affected: >= 4.1.11, < 4.1.12; >= 5.0.0-rc.2, < 5.0.3
CVE-2026-84373
5.9
1%
Sep 1
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
Affected: >= 2.1.0, < 4.1.11; >= 5.0.0-beta.1, < 5.0.0-rc.2
CVE-2026-112949
4.7
0%
Oct 20
Vitest: Code injection via unauthenticated manual mock registration
Affected: >= 2.1.0-beta.7, < 4.1.12; >= 5.0.0, < 5.0.3
Showing 3