@rootio/vitest vulnerabilities (Root)

2 vulnerabilities.

• @rootio/vitest Root Vitest: Arbitrary file can be read and executed when Vitest UI server is listening CVE-2026-47429 Public exploitFix available 9.8 CriticalJune 1, 2026
• @rootio/vitest Root Remote Code Execution when accessing a malicious website while Vitest API server is listening CVE-2025-24964 Fix available 9.7 CriticalFebruary 4, 2025