Vitest

2 CVEs product

Monthly

CVE-2025-24964 npm CRITICAL POC PATCH Act Now

Vitest is a testing framework powered by Vite. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Vitest
NVD GitHub
CVSS 3.1
9.6
EPSS
4.4%
CVE-2025-24963 npm MEDIUM PATCH This Month

Vitest is a testing framework powered by Vite. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 18.8%.

Path Traversal Vitest
NVD GitHub
CVSS 3.1
5.9
EPSS
18.8%
EPSS 4% CVSS 9.6
CRITICAL POC PATCH Act Now

Vitest is a testing framework powered by Vite. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Vitest
NVD GitHub
EPSS 19% CVSS 5.9
MEDIUM PATCH This Month

Vitest is a testing framework powered by Vite. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 18.8%.

Path Traversal Vitest
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy