Vulnerabilities

Last updated 25 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
vite-plus launch-editor: `fs.existsSync()` existence check can be bypassed on Windows High Risk 8.0 2 hours ago 2 hours ago
vite-plus launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors Medium Risk 6.0 2 hours ago 2 hours ago
vite-plus launch-editor: escapeCmdArgs() omits % escaping on Windows Medium Risk 6.0 3 hours ago 3 hours ago
vite-plus launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows Medium Risk 6.0 4 months ago 1 month ago
vite-plus vite: `server.fs.deny` bypass on Windows alternate paths High Risk 7.5 4 months ago 1 month ago
vite-plus Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE Critical 9.8 4 months ago 2 months ago
vite-plus Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME Critical 10.0 6 months ago 5 months ago