Skip to main content

Vitejs

11 CVEs vendor

Monthly

CVE-2025-31125 Mar 31, 17:15 npm MEDIUM POC KEV PATCH THREAT Act Now

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Red Hat Vite Vitejs
NVD GitHub
CVSS 3.1
5.3
EPSS
83.3%
Threat
6.6
CVE-2024-52011 Jun 01, 17:17 npm HIGH POC PATCH GHSA This Week

launch-editor allows users to open files with line numbers in editor from Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Node.js Microsoft Vite Launch Editor +1
NVD VulDB GitHub
CVSS 4.0
7.5
EPSS
0.1%
CVE-2025-58752 Sep 08, 23:15 npm LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vite Vitejs
NVD GitHub
CVSS 4.0
2.3
EPSS
0.0%
CVE-2025-58751 Sep 08, 23:15 npm LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite Vitejs
NVD GitHub
CVSS 4.0
2.3
EPSS
1.4%
CVE-2025-46565 May 01, 18:15 npm MEDIUM POC PATCH This Month

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Red Hat Vite Vitejs
NVD GitHub
CVSS 4.0
6.0
EPSS
1.5%
CVE-2025-30208 Mar 24, 17:15 npm MEDIUM POC PATCH THREAT This Month

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.0%.

Information Disclosure Red Hat Vite Vitejs
NVD GitHub Exploit-DB
CVSS 3.1
5.3
EPSS
89.0%
Threat
5.2
CVE-2025-24010 Jan 20, 16:15 npm MEDIUM POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Red Hat Vite Vitejs
NVD GitHub
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-23331 Jan 19, 20:15 npm HIGH POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Vite Vitejs
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2023-49293 Dec 04, 23:15 npm MEDIUM POC PATCH This Month

Vite is a website frontend framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vite Vitejs
NVD GitHub
CVSS 3.1
6.1
EPSS
1.0%
CVE-2023-34092 Jun 01, 17:15 npm HIGH POC PATCH This Week

Vite provides frontend tooling. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Vite Vitejs
NVD GitHub
CVSS 3.1
7.5
EPSS
3.2%
CVE-2022-35204 Aug 18, 19:15 npm MEDIUM POC PATCH This Month

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Vite Vitejs
NVD GitHub
CVSS 3.1
4.3
EPSS
1.1%
EPSS 83% 6.6 CVSS 5.3
MEDIUM POC KEV PATCH THREAT Act Now

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Red Hat Vite +1
NVD GitHub
EPSS 0% CVSS 7.5
HIGH POC PATCH This Week

launch-editor allows users to open files with line numbers in editor from Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Command Injection Node.js Microsoft +3
NVD VulDB GitHub
EPSS 0% CVSS 2.3
LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Vite Vitejs
NVD GitHub
EPSS 1% CVSS 2.3
LOW POC PATCH Monitor

Vite is a frontend tooling framework for JavaScript. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Vite Vitejs
NVD GitHub
EPSS 1% CVSS 6.0
MEDIUM POC PATCH This Month

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Red Hat Vite +1
NVD GitHub
EPSS 89% 5.2 CVSS 5.3
MEDIUM POC PATCH THREAT This Month

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 89.0%.

Information Disclosure Red Hat Vite +1
NVD GitHub Exploit-DB
EPSS 0% CVSS 6.5
MEDIUM POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Red Hat Vite +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Vite is a frontend tooling framework for javascript. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microsoft Vite +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Vite is a website frontend framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Vite Vitejs
NVD GitHub
EPSS 3% CVSS 7.5
HIGH POC PATCH This Week

Vite provides frontend tooling. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Vite Vitejs
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM POC PATCH This Month

Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Vite Vitejs
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy