Skip to content
Voidzero vulnerabilities
Newest
-
vitejs vite, voidzero vite\+ +1 more
Vite: `server.fs.deny` bypass on Windows alternate paths
CVE-2026-53571
Public exploitFix available
8.2 High
-
voidzero-dev vite-plus, voidzero vite\+ +1 more
`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`
CVE-2026-41211
Fix available
8.4 High
-
vitejs vite, vite-plus, voidzero vite\+ +2 more
Vite has a Path Traversal in Optimized Deps `.map` Handling
CVE-2026-39365
Fix available
6.3 Medium
-
vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +9 more +11 more
Vite has a `server.fs.deny` bypass with queries
CVE-2026-39364
Fix available
8.2 High
-
vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +13 more +15 more
Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
CVE-2026-39363
Public exploitFix available
8.2 High