Skip to content

CyberSIXT Search

Vendor

vitest-dev

articles · all time: 2
CVEs tracked · all time: 3

Two articles so far, 5 Jun to 16 Jun.

Fri 5 Jun · first reportCritical Vitest flaws expose dev setups to remote code executionSecurityOnline
Tue 16 JunVitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)SecurityOnline

See the full timeline

Products: vitest

CVEs

3 CVEs

CVE-2026-53633Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCECVSS9.8Critical–Not in KEV0.9%EPSS1article

CVE-2026-47429Vitest: Arbitrary file can be read and executed when Vitest UI server is listeningCVSS9.8Critical–Not in KEV0.9%EPSS1article

CVE-2026-47428Vitest browser mode serves unsanitized otelCarrier query parameter as inline scriptCVSS9.6Critical–Not in KEV0.6%EPSS1article

Coverage

2 articles, all timeFull timeline RSS feed

16 JunVitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)SecurityOnline
5 JunCritical Vitest flaws expose dev setups to remote code executionSecurityOnline · first in our coverage