@vitest/browser vulnerabilities (npm)
5 vulnerabilities.
-
@vitest/browsernpm Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file 6.5 Medium -
@vitest/browsernpm Vitest: Browser Mode provider commands bypass the file-access permission gate 9.4 Critical -
@vitest/browsernpm Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 9.8 Critical -
@vitest/browsernpm Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 9.6 Critical -
@vitest/browsernpm Browser mode serves arbitrary files in vitest 5.9 Medium