Vulnerabilities in @vitest

4 results

CVE-2026-112950MEDIUMVitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fixEPSS 0.5%CVE-2026-84373MEDIUMVitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect MockEPSS 0.5%CVE-2026-112948MEDIUMVitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token fileEPSS 0.4%CVE-2026-112949MEDIUMVitest: Code injection via unauthenticated manual mock registrationEPSS 0.3%