An open index of dependabot pull requests across open source projects.

vite

Ecosystem:
npm
Package URL:
pkg:npm/vite
Total PRs:
122,164 Dependabot PRs
Latest PR:
about 2 hours ago
Unique Repositories:
49,183 repositories
Unique Repos (30 days):
1,450 repositories
Security Advisories
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
GHSA-4r4m-qw57-chr8 CVE-2025-31125 MODERATE published about 1 year ago • updated 1 day ago
### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the n...
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
GHSA-v6wh-96g9-6wx3 CVE-2026-53632 MODERATE published 6 days ago • updated 6 days ago
### Summary The `launch-editor` NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically ...
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published over 2 years ago • updated 1 day ago
### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
GHSA-mv48-hcvh-8jj8 CVE-2022-35204 HIGH published almost 4 years ago • updated 1 day ago
Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
Websites were able to send any requests to the development server and read the response in vite
GHSA-vg6x-rcgg-rjx6 CVE-2025-24010 MODERATE published over 1 year ago • updated 1 day ago
### Summary Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of...
Recent PRs
Package Details
Name: vite
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/vite
JSON API: View JSON
Security Advisories

22

Active advisories
HIGH 7
MODERATE 13
LOW 2
View All npm Advisories
Package Information
Description:

Native-ESM powered web dev build tool

Repository: https://github.com/vitejs/vite
Homepage: https://vite.dev
Latest Release: 6.3.5
about 1 year ago
Dependent Repos: 363,358
Dependent Packages: 31,388
Downloads: 105,034,023
Ranking: Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs
PR Status
Open 58,708 (48.1%)
Merged 15,942 (13.1%)
Closed 43,076 (35.3%)
PR Types
Major 39,186 (32.1%)
Minor 23,478 (19.2%)
Patch 53,852 (44.1%)
Removal 1,051 (0.9%)