vite-plus Security Advisories - Npm | Ecosyste.ms: Advisories

vite-plus

The Unified Toolchain for the Web

View on github.com · View on npmjs.org

Security Advisories for vite-plus in npm

Critical

2 months ago

Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE GSA_kwCzR0hTQS1nOG1yLTg1am0tN3hobc4ABYr7

npm vite-plus, @vitest/browser

Moderate

2 months ago

launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows GSA_kwCzR0hTQS12NndoLTk2ZzktNnd4M84ABYrP

npm vite-plus, vite, launch-editor

High

2 months ago

vite: `server.fs.deny` bypass on Windows alternate paths GSA_kwCzR0hTQS1meDJoLXBmNmoteGNmZs4ABYrO

npm vite-plus, vite

High

4 months ago

Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME GSA_kwCzR0hTQS0zM3IzLTR3aGMtNDRjMs4ABVWp

npm vite-plus

Filter by Severity

High 2 Moderate 1 Critical 1