Voidzero Vite\+ vulnerabilities

• vitejs vite, voidzero vite\+ +1 more Vite: `server.fs.deny` bypass on Windows alternate paths CVE-2026-53571 Public exploitFix available 8.2 HighJune 15, 2026
• voidzero-dev vite-plus, voidzero vite\+ +1 more `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME` CVE-2026-41211 Fix available 8.4 HighApril 16, 2026
• vitejs vite, vite-plus, voidzero vite\+ +2 more Vite has a Path Traversal in Optimized Deps `.map` Handling CVE-2026-39365 Fix available 6.3 MediumApril 7, 2026
• vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +9 more +11 more Vite has a `server.fs.deny` bypass with queries CVE-2026-39364 8.2 HighApril 7, 2026
• vitejs vite, red hat advanced cluster security 4, ansible automation platform 2 +13 more +15 more Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket CVE-2026-39363 Public exploitFix available 8.2 HighApril 6, 2026