vitest vulnerabilities (TuxCare)
9 vulnerabilities.
-
vitestTuxCare Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix 5.9 Medium -
vitestTuxCare Vitest: Code injection via unauthenticated manual mock registration 4.7 Medium -
vitestTuxCare Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock 5.9 Medium -
vitestTuxCare Vitest: Browser Mode provider commands bypass the file-access permission gate 9.4 Critical -
vitestTuxCare Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 9.8 Critical -
vitestTuxCare Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 9.6 Critical -
vitestTuxCare Vitest: Arbitrary file can be read and executed when Vitest UI server is listening 9.8 Critical -
vitestTuxCare Remote Code Execution when accessing a malicious website while Vitest API server is listening 9.7 Critical -
vitestTuxCare Browser mode serves arbitrary files in vitest 5.9 Medium