VendorsVoidZerovite%5C%2Ball versions
Vulnerabilities

VoidZero Vite+

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2026-41211
`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`
Published 2026-04-23 · Analyzed
10.0EPSS 0.003
CVE-2026-39363
Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
Published 2026-04-07 · Modified
8.2EPSS 0.034
CVE-2026-39364
Vite has a `server.fs.deny` bypass with queries
Published 2026-04-07 · Modified
8.2EPSS 0.023
CVE-2026-53571
Vite: `server.fs.deny` bypass on Windows alternate paths
Published 2026-06-22 · Analyzed
8.2EPSS 0.006
CVE-2026-39365
Vite has a Path Traversal in Optimized Deps `.map` Handling
Published 2026-04-07 · Analyzed
6.3EPSS 0.009