Products: 4
Vulnerabilities: 32
Known Exploited: 0
1
Critical Level Threats
8
High Level Threats
19
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-118662
Vite: `server.fs.deny` bypassed with queries
Last Modified: Nov 03, 2026
Published: Oct 28, 2026
CVE-2026-112948
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
Last Modified: Oct 21, 2026
Published: Oct 20, 2026
CVE-2026-112947
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
Last Modified: Oct 21, 2026
Published: Oct 20, 2026
CVE-2026-112946
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
Last Modified: Oct 20, 2026
Published: Oct 20, 2026
CVE-2026-112945
Vite: Cross origin script execution through Vite custom middleware
Last Modified: Oct 28, 2026
Published: Oct 20, 2026
Items Per Page
