`vite`

Ecosystem:
npm

Package URL:
pkg:npm/vite

Total PRs:
128,324 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
53,723 repositories

Unique Repos (30 days):
1,467 repositories

Security Advisories

Websites were able to send any requests to the development server and read the response in vite

GHSA-vg6x-rcgg-rjx6 CVE-2025-24010 MODERATE published over 1 year ago • updated 2 days ago

### Summary Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published almost 3 years ago • updated 4 days ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

GHSA-r825-w8mm-5pxw CVE-2026-112944 MODERATE published 1 day ago • updated 1 day ago

### Summary `launch-editor` forwarded file paths directly to editors without sanitization. If a path resembles a CLI flag, editors like Vim may in...

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

GHSA-587h-7wmj-h5pm CVE-2026-112942 HIGH published 1 day ago • updated 1 day ago

### Summary `launch-editor` checked `fs.existsSync(fileName)` before passing a supplied path to an editor command. On Windows, an attacker can byp...

launch-editor: escapeCmdArgs() omits % escaping on Windows

GHSA-698v-4r3x-3vcv CVE-2026-112943 MODERATE published 1 day ago • updated 1 day ago

### Summary `launch-editor` did not escape `%` on Windows when passing an argument to `cmd`. When an environment variable contained a malicious va...

View all 28 advisories

Recent PRs

RSS Feed

chore(deps-dev): bump vite from 8.0.16 to 8.1.6 in /web

blackhorseya/linear-algebra-101-rust #2

8.0.16 → 8.1.6 Minor PR

Open about 2 hours ago 1 comment

build(deps-dev): bump vite from 8.0.14 to 8.1.6

Genesis-Conductor-Engine/openclaw #31

8.0.14 → 8.1.6 Minor PR

Open about 3 hours ago 1 comment

chore(deps-dev): bump vite from 7.2.7 to 7.3.7

Dustin4444/mcp-ui #56

7.2.7 → 7.3.7 Minor PR

Open about 3 hours ago 7 comments

chore(deps): bump vite from 8.3.1 to 8.3.5

br1dge-dev/br1dge-website #14

8.3.1 → 8.3.5 Patch PR

Closed about 5 hours ago 3 comments

Bump vite from 8.3.2 to 8.3.5 in the security group across 1 directory

DEFRA/epr-re-ex-admin-frontend #625

8.3.2 → 8.3.5 Patch PR

Open about 7 hours ago 4 comments

build(deps-dev): bump vite from 8.0.16 to 8.3.5 in /Frontend

kjsvbshk/Tesis #38

8.0.16 → 8.3.5 Minor PR

Open about 7 hours ago 1 comment

chore(deps-dev): bump vite from 7.2.2 to 7.3.7

Dustin4444/1paying-kit #30

7.2.2 → 7.3.7 Minor PR

Open about 8 hours ago 7 comments

chore(deps-dev): bump vite from 5.2.10 to 6.4.4

Morin3/refine #747

5.2.10 → 6.4.4 Major PR

Open about 8 hours ago 3 comments

build(deps): bump the npm-dependencies group across 1 directory with 16 updates

manojmanivannan/AgentGraphStudio #145

8.3.0 → 8.3.4 Patch PR

Open about 9 hours ago 3 comments

Security(deps-dev): bump vite from 8.0.16 to 8.3.5 in /web-mvp

mirichard/pm-tools-templates #1520

8.0.16 → 8.3.5 Minor PR

Open about 9 hours ago 12 comments

Bump vite from 8.2.2 to 8.3.5 in /web

fbivinay/Odoo-Hackathon-Finals-Textile-Manufacturing #9

8.2.2 → 8.3.5 Minor PR

Open about 9 hours ago 1 comment

chore(deps-dev): Bump vite from 7.2.2 to 7.3.7

alecf/ssn-calculator #23

7.2.2 → 7.3.7 Minor PR

Open about 10 hours ago 1 comment

build(deps-dev): bump vite from 8.3.2 to 8.3.5

TechForPalestine/profile-pic-maker #184

8.3.2 → 8.3.5 Patch PR

Closed about 10 hours ago 1 comment

build(deps-dev): bump vite from 8.2.2 to 8.3.5 in the npm_and_yarn group across 1 directory

CARLOSMARES/pokedex #1

8.2.2 → 8.3.5 Minor PR

Open about 11 hours ago 1 comment

build(deps-dev): bump vite from 8.2.1 to 8.3.5 in /apps/hackathon

nemtus/apps #322

8.2.1 → 8.3.5 Minor PR

Open about 12 hours ago 2 comments

build(deps): bump the minor-and-patch group across 1 directory with 117 updates

denizlg24/denizlg24.com #275

8.3.0 → 8.3.4 Patch PR

Open about 12 hours ago 2 comments

chore(deps-dev): Bump vite from 8.2.2 to 8.3.5

Arthurguang/riftbound-tw #65

8.2.2 → 8.3.5 Minor PR

Open about 12 hours ago 1 comment

Bump vite from 8.2.2 to 8.3.5 in the npm_and_yarn group across 1 directory

Nico-Coni/Wiki-IBS #1

8.2.2 → 8.3.5 Minor PR

Open about 13 hours ago 1 comment

⬆️ Bump vite from 6.0.7 to 6.4.5

pozniej-znajde-wolne-haslo/portfolio-website #17

6.0.7 → 6.4.5 Minor PR

Closed about 13 hours ago 2 comments

chore(deps-dev): bump vite from 8.3.2 to 8.3.5 in the npm_and_yarn group across 1 directory

rajivranjanmars/expense-tracker #5

8.3.2 → 8.3.5 Patch PR

Open about 14 hours ago 1 comment

Bump vite from 8.3.2 to 8.3.5

tokuhirom/KeyScripten #359

8.3.2 → 8.3.5 Patch PR

Closed about 14 hours ago 1 comment

chore(deps): bump vite from 8.2.2 to 8.3.5 in /packages/adapters/clawdstrike-hushd-engine

backbay-labs/clawdstrike #858

8.2.2 → 8.3.5 Minor PR

Open about 15 hours ago 1 comment

build(deps-dev): bump vite from 8.3.1 to 8.3.5

xsmartbartx/Omniflow #70

8.3.1 → 8.3.5 Patch PR

Open about 15 hours ago 2 comments

chore(deps-dev): bump vite from 8.2.2 to 8.3.5 in /regwatch/frontend

Hussain0327/amneal #322

8.2.2 → 8.3.5 Minor PR

Open about 15 hours ago 1 comment

chore: bump vite from 7.3.6 to 8.3.5

statlyaus/Statly #1049

7.3.6 → 8.3.5 Major PR

Open about 16 hours ago 2 comments

build(deps-dev): bump vite from 8.3.0 to 8.3.5 in /web

gocov/gocov #233

8.3.0 → 8.3.5 Patch PR

Open about 17 hours ago 1 comment

Bump vite from 8.3.2 to 8.3.5

MurayaSoftTouch/hamman-portfolio #1

8.3.2 → 8.3.5 Patch PR

Open about 17 hours ago 1 comment

Bump vite from 8.2.2 to 8.2.4

kurrent-io/gaffer #355

8.2.2 → 8.2.4 Patch PR

Open about 17 hours ago 1 comment

chore(deps-dev): Bump vite from 8.2.2 to 8.3.5 in /nortear-design-system-react

julianamucci/design-system #107

8.2.2 → 8.3.5 Minor PR

Open about 17 hours ago 1 comment

chore(deps): bump vite in /web

shaharia-lab/agento #794

8.2.2 → 8.3.5 Minor PR

Open about 17 hours ago 2 comments

chore(deps-dev): Bump vite from 8.3.2 to 8.3.3

next-friday/eslint-plugin-friday #29

8.3.2 → 8.3.3 Patch PR

Open about 17 hours ago 3 comments

chore(deps-dev): bump vite from 8.3.2 to 8.3.5

ZakisOK/betbacktest #32

8.3.2 → 8.3.5 Patch PR

Open about 17 hours ago 3 comments

Bump vite from 8.2.2 to 8.3.5

SWilford/jmu-rugby-site #45

8.2.2 → 8.3.5 Minor PR

Open about 18 hours ago 1 comment

chore(deps-dev): bump vite from 8.3.1 to 8.3.3

CaoMeiYouRen/caomeiyouren.github.io #19

8.3.1 → 8.3.3 Patch PR

Closed about 18 hours ago 1 comment

chore(deps-dev): bump vite from 8.0.16 to 8.3.5

chrisreddington/flight-school #260

8.0.16 → 8.3.5 Minor PR

Closed about 18 hours ago 1 comment

chore(deps-dev): Bump vite from 8.2.1 to 8.3.5

williamzujkowski/progress-quest-iii #876

8.2.1 → 8.3.5 Minor PR

Open about 18 hours ago 1 comment

chore(deps): bump vite from 8.3.2 to 8.3.3 in /frontend

ArcReel/ArcReel #3337

8.3.2 → 8.3.3 Patch PR

Open about 18 hours ago 2 comments

build(deps): bump vite from 8.2.2 to 8.3.4 in /workers/contact-form

liberatingscripture/litbible #347

8.2.2 → 8.3.4 Minor PR

Open about 18 hours ago 1 comment

build(deps-dev): bump vite from 8.3.2 to 8.3.4

jonathanong/pr-shepherd #622

8.3.2 → 8.3.4 Patch PR

Closed about 19 hours ago 1 comment

Bump vite from 8.3.2 to 8.3.4

MaddogWarner/maddogwarnercom #69

8.3.2 → 8.3.4 Patch PR

Closed about 19 hours ago 1 comment

chore(deps-dev): bump vite from 8.1.0 to 8.3.4 in /docs

OpenNHP/opennhp #1798

8.1.0 → 8.3.4 Minor PR

Closed about 19 hours ago 1 comment

chore(deps-dev): Bump vite from 8.3.2 to 8.3.4 in /nextcloud-app

intrafind/ihub-apps #2937

8.3.2 → 8.3.4 Patch PR

Open about 19 hours ago 3 comments

Build(deps): Bump vite from 8.3.1 to 8.3.4 in /tooling

Coverage-Cat/consumer-agent-testing-tool #12

8.3.1 → 8.3.4 Patch PR

Closed about 20 hours ago 1 comment

build(deps): bump vite from 8.3.2 to 8.3.4

ddev/ddev.com #758

8.3.2 → 8.3.4 Patch PR

Open about 20 hours ago 1 comment

Bump vite from 8.3.1 to 8.3.4 in /frontend

JanEric2609/Quantfolio-public #45

8.3.1 → 8.3.4 Patch PR

Open about 21 hours ago 2 comments

chore(deps-dev): bump vite from 8.3.1 to 8.3.3

moisesvalero/pulse #1

8.3.1 → 8.3.3 Patch PR

Open about 21 hours ago 1 comment

chore(deps-dev): bump vite from 8.2.1 to 8.3.4

clusy-io/meet #40

8.2.1 → 8.3.4 Minor PR

Open about 21 hours ago 1 comment

chore: Bump vite from 8.2.2 to 8.3.4

meszarosdezso/Self-site #72

8.2.2 → 8.3.4 Minor PR

Open about 21 hours ago 2 comments

hono-worker(deps-dev): bump vite from 8.2.2 to 8.3.4 in /hono-worker

ProjectEuropa/Europa #688

8.2.2 → 8.3.4 Minor PR

Open about 21 hours ago 3 comments

build(deps-dev): bump vite from 8.2.1 to 8.2.4

sushindustries/sushindustries #21

8.2.1 → 8.2.4 Patch PR

Open about 21 hours ago 2 comments

Package Details

Name:	`vite`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/vite`
JSON API:	View JSON

Security Advisories

28

Active advisories

HIGH 8

MODERATE 17

LOW 3

View All npm Advisories

Package Information

Description:

Native-ESM powered web dev build tool

Repository:	https://github.com/vitejs/vite
Homepage:	https://vite.dev
Latest Release:	`6.3.5` over 1 year ago
Dependent Repos:	363,358
Dependent Packages:	31,388
Downloads:	105,034,023
Ranking:	Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs

PR Status

Open 61,277 (47.8%)

Merged 15,946 (12.4%)

Closed 46,672 (36.4%)

PR Types

Major 40,922 (31.9%)

Minor 25,858 (20.2%)

Patch 55,895 (43.6%)

Removal 1,059 (0.8%)