@vitest/web-worker vulnerabilities (TuxCare)
4 vulnerabilities.
-
@vitest/web-workerTuxCare Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock 5.9 Medium -
@vitest/web-workerTuxCare Vitest: Browser Mode provider commands bypass the file-access permission gate 9.4 Critical -
@vitest/web-workerTuxCare Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 9.8 Critical -
@vitest/web-workerTuxCare Vitest: Arbitrary file can be read and executed when Vitest UI server is listening 9.8 Critical