Skip to main content

Vendor/product archive

vitest.dev / vitest CVEs

Beta · best-effort

2 CVEs tagged to vitest.dev / vitest1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2025-24964

Published Feb 4, 2025

Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is liste…

CVSS 9.6 · Critical
evidence mentions
4
Buzz score
26.1
Vendor/product tagsBeta · best-effort

CVE-2025-24963

Published Feb 4, 2025

Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server…

CVSS 5.9 · Medium
evidence mentions
4
Buzz score
26.1
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1