Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CLSA-2026-1790459317
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/coverage-istanbul
  • TuxCare:npm/@vitest/coverage-v8
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 9 more
TuxCare security update for 14 packages (1 CVE) 3 days ago
  • Fix available
CLSA-2026-1790162728
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/coverage-istanbul
  • TuxCare:npm/@vitest/coverage-v8
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 9 more
TuxCare security update for 14 packages (1 CVE) 6 days ago
  • Fix available
CLSA-2026-1790109523
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/coverage-istanbul
  • TuxCare:npm/@vitest/coverage-v8
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 9 more
TuxCare security update for 14 packages (2 CVEs) 22 Sep
  • Fix available
CLSA-2026-1789904677
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/browser-playwright
  • TuxCare:npm/@vitest/browser-preview
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 6 more
TuxCare security update for 11 packages (2 CVEs) 20 Sep
  • Fix available
CLSA-2026-1789901057
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/browser-playwright
  • TuxCare:npm/@vitest/browser-preview
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 6 more
TuxCare security update for 11 packages (2 CVEs) 20 Sep
  • Fix available
CLSA-2026-1789478968
  • TuxCare:npm/@vitest/browser
  • TuxCare:npm/@vitest/browser-playwright
  • TuxCare:npm/@vitest/browser-preview
  • TuxCare:npm/@vitest/expect
  • TuxCare:npm/@vitest/mocker
  • ... 6 more
TuxCare security update for 11 packages (1 CVE) 15 Sep
  • Fix available
GHSA-p63j-vcc4-9vmv
  • npm/@vitest/browser
@vitest/browser: Browser Mode provider commands bypass the file-access permission gate 21 Jul
  • Fix available
  • Severity - 9.4 (Critical)
GHSA-g8mr-85jm-7xhm
  • npm/@vitest/browser
  • npm/vite-plus
Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE 15 Jun
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-2h32-95rg-cppp
  • npm/@vitest/browser
Vitest browser mode serves unsanitized otelCarrier query parameter as inline script 01 Jun
  • Fix available
  • Severity - 9.6 (Critical)
GHSA-8gvc-j273-4wm5
  • npm/@vitest/browser
Vitest browser mode serves arbitrary files 04 Feb 2025
  • Fix available
  • Severity - 5.9 (Medium)