VI
Product
Vite+
5
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Vite+ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41211 | 10.0 | Apr 23 | `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME` Affected: before 0.1.17 |
| CVE-2026-53571 | 7.5 | Jun 22 | Vite: `server.fs.deny` bypass on Windows alternate paths Affected: before 0.1.24 |
| CVE-2026-39364 | 7.5 | Apr 7 | Vite has a `server.fs.deny` bypass with queries Affected: through 0.1.15 |
| CVE-2026-39363 | 7.5 | Apr 7 | Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket Affected: through 0.1.15 |
| CVE-2026-39365 | 5.3 | Apr 7 | Vite has a Path Traversal in Optimized Deps `.map` Handling Affected: through 0.1.15 |
Showing 5