@vitest/mocker vulnerabilities (TuxCare)
6 vulnerabilities.
-
@vitest/mockerTuxCare Vitest: Code injection via unauthenticated manual mock registration 4.7 Medium -
@vitest/mockerTuxCare Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock 5.9 Medium -
@vitest/mockerTuxCare Vitest: Browser Mode provider commands bypass the file-access permission gate 9.4 Critical -
@vitest/mockerTuxCare Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 9.8 Critical -
@vitest/mockerTuxCare Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 9.6 Critical -
@vitest/mockerTuxCare Vitest: Arbitrary file can be read and executed when Vitest UI server is listening 9.8 Critical