Live data from GitHub and npm, updated daily.
Data last fetched: 2026-10-10
3 active CVEs reported via OSV.dev
When Vitest UI server is listening, arbitrary file can be read and executed
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Get SLA-backed support, security patches, and direct access to senior engineers for Vitest — without relying on volunteer maintainers.