Skip to main content

Vite

11 CVEs product

Monthly

CVE-2024-52011 npm HIGH POC PATCH GHSA This Week

launch-editor allows users to open files with line numbers in editor from Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Node.js Microsoft Command Injection Launch Editor Vite
NVD GitHub
CVSS 4.0
7.5
EPSS
0.1%
CVE-2025-58752 npm LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vite
NVD GitHub
CVSS 4.0
2.3
EPSS
0.0%
CVE-2025-58751 npm LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite
NVD GitHub
CVSS 4.0
2.3
EPSS
1.4%
CVE-2025-46565 npm MEDIUM POC PATCH This Month

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite Red Hat
NVD GitHub
CVSS 4.0
6.0
EPSS
1.5%
CVE-2025-31125 npm MEDIUM POC KEV PATCH THREAT Act Now

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Vite Red Hat
NVD GitHub
CVSS 3.1
5.3
EPSS
83.3%
Threat
6.6
CVE-2025-30208 npm MEDIUM POC PATCH THREAT This Month

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.0%.

Information Disclosure Vite Red Hat
NVD GitHub Exploit-DB
CVSS 3.1
5.3
EPSS
89.0%
Threat
5.2
CVE-2025-24010 npm MEDIUM POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Vite Red Hat
NVD GitHub
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-23331 npm HIGH POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Vite
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2023-49293 npm MEDIUM POC PATCH This Month

Vite is a website frontend framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vite
NVD GitHub
CVSS 3.1
6.1
EPSS
1.0%
CVE-2023-34092 npm HIGH POC PATCH This Week

Vite provides frontend tooling. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Vite
NVD GitHub
CVSS 3.1
7.5
EPSS
3.2%
CVE-2022-35204 npm MEDIUM POC PATCH This Month

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Vite
NVD GitHub
CVSS 3.1
4.3
EPSS
1.1%
EPSS 0% CVSS 7.5
HIGH POC PATCH This Week

launch-editor allows users to open files with line numbers in editor from Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Node.js Microsoft Command Injection +2
NVD GitHub
EPSS 0% CVSS 2.3
LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vite
NVD GitHub
EPSS 1% CVSS 2.3
LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite
NVD GitHub
EPSS 1% CVSS 6.0
MEDIUM POC PATCH This Month

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite Red Hat
NVD GitHub
EPSS 83% 6.6 CVSS 5.3
MEDIUM POC KEV PATCH THREAT Act Now

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Vite Red Hat
NVD GitHub
EPSS 89% 5.2 CVSS 5.3
MEDIUM POC PATCH THREAT This Month

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.0%.

Information Disclosure Vite Red Hat
NVD GitHub Exploit-DB
EPSS 0% CVSS 6.5
MEDIUM POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Vite Red Hat
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Vite
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Vite is a website frontend framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vite
NVD GitHub
EPSS 3% CVSS 7.5
HIGH POC PATCH This Week

Vite provides frontend tooling. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Vite
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Vite
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy