Skip to content
Every CVE
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Questdb
Questdb vulnerabilities
Products
Ui
2
Newest
@vitest
browser
,
ui
,
vitest-dev
vitest
+1 more
+3 more
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
CVE-2026-112948
Fix available
6.5
Medium
October 20, 2026
questdb
ui
questdb ui Web Console cross site scripting
CVE-2026-0824
Fix available
5.1
Medium
January 10, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open