VI
Product
vite-plus
by voidzero-dev · last CVE Apr 23, 2026
1
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add vite-plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41211
10.0
0%
Apr 23
`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`
Affected: < 0.1.17
Showing 1