Skip to content

CyberSIXT Search

Vendor

Vite

CVEs tracked · all time: 4
in CISA KEV · all time: 1
articles · since 11 Sep: 2
articles · all time: 6

2 articles since 11 Sep.

Show as table

Vite: articles per day
Day (UTC)	Articles
Tue 15 Sep	1
Mon 21 Sep	1

See the full timeline

Products: vite, vite-plus, Vitejs

CVEs

4 CVEs

CVE-2025-31125Vite Vitejs Improper Access Control VulnerabilityCVSS5.3MediumExploited66%EPSS4articles

CVE-2026-39364Vite has a `server.fs.deny` bypass with queriesCVSS8.2High–Not in KEV2.3%EPSS2articles

CVE-2025-30208vitejs vite vulnerabilityCVSS5.3Medium–Not in KEV75%EPSS1article

CVE-2024-45811server.fs.deny bypassed when using ?import&raw in viteCVSS4.8Medium–Not in KEV1.1%EPSS0articles

Coverage

6 articles, all timeFull timeline RSS feed

21 SepCisco Warns of Actively Exploited Flaws Enabling Root AccessSecurityOnline
15 SepAttackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-39364SecurityOnline
2 AprAttempts to Exploit Exposed "Vite" Installs (CVE-2025-30208), (Thu, Apr 2nd)SANS ISC
23 JanCISA Updates KEV Catalog with Four Actively Exploited Software VulnerabilitiesThe Hacker News
23 JanU.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
23 JanCISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits SurgeSecurityOnline · first in our coverage