Skip to content
Sign in

Vite product

Vitejs

Alert
No CISA KEV deadline is open. CISA last added a Vitejs CVE on 22 Jan.

Tracked since 23 Jan · latest article 15 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date1

Vitejs CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Vitejs CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2025-31125Vitejs22 JanPassed 12 Feb4
Vendor CSV of 1 entry for ViteAll 1 vendor entry, including other products.

Patch cadence and exploit odds

How often CISA adds Vitejs CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’251Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Fix listed

0 of 1 CVE in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2025-31125: 99.5th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2025-3112599.5

Coverage4 articles · all time

The latest 4 articles naming Vitejs, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 15 Sep4 articles3 outlets

4 articles from 3 outlets since 23 Jan. Quiet since 15 Sep.

Now23 Jan12 Sep18222725812162025First reportSecurityOnline · 23 Jan, 10:16Picked up againafter 33 weeks quiet
  • Fri 23 Jan, 10:16 UTC. SecurityOnline, first report. CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge. Cites a CVE in CISA KEV.
  • Fri 23 Jan, 12:26 UTC. Security Affairs, its first report on the story. U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Fri 23 Jan, 15:51 UTC. The Hacker News, its first report on the story. CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 02:21 UTC. SecurityOnline. Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-39364.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 4 articles as a list
  1. Fri 23 JanDay 03
    1. CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge10:16 · SecurityOnline · First report · Exploited CVE · Known exploited CVE
    2. U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog12:26 · Security Affairs · Known exploited CVE
    3. CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities15:51 · The Hacker News · Known exploited CVE

  2. Quiet for 33 weeks

    Tue 15 SepDay 2351
    1. Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-3936402:21 · SecurityOnline · Picked up again

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2025-31125Exploited

    Vite Vitejs Improper Access Control Vulnerability

    5.3Medium75% EPSS · 4 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in