package

npm/vitest

pkg:npm/vitest

CRITICAL9.8npm

When Vitest UI server is listening, arbitrary file can be read and executed

Modified: 9/10/2026

MEDIUM5.9npm

Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

Modified: 9/8/2026

CRITICAL9.6npm

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

Modified: 2/4/2025