@vitest/spy vulnerabilities (TuxCare)
5 vulnerabilities.
-
@vitest/spyTuxCare Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock 5.9 Medium -
@vitest/spyTuxCare Vitest: Browser Mode provider commands bypass the file-access permission gate 9.4 Critical -
@vitest/spyTuxCare Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 9.8 Critical -
@vitest/spyTuxCare Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 9.6 Critical -
@vitest/spyTuxCare Vitest: Arbitrary file can be read and executed when Vitest UI server is listening 9.8 Critical