Skip to content

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

Critical severity GitHub Reviewed Published Feb 4, 2025 in vitest-dev/vitest • Updated Feb 4, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts