An open index of dependabot pull requests across open source projects.

vite

Ecosystem:
npm
Package URL:
pkg:npm/vite
Total PRs:
48,723 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
16,985 repositories
Unique Repos (30 days):
5,590 repositories
Security Advisories
Vite's `server.fs.deny` did not deny requests for patterns with directories.
GHSA-8jhw-289h-jh2g CVE-2024-31207 MODERATE published over 1 year ago • updated 3 months ago
### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` did not deny requests for patte...
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
GHSA-mv48-hcvh-8jj8 CVE-2022-35204 HIGH published about 3 years ago • updated about 1 month ago
Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
Vite's server.fs.deny bypassed with /. for files under project root
GHSA-859w-5945-r5v3 CVE-2025-46565 MODERATE published 4 months ago • updated about 2 months ago
### Summary The contents of files in [the project `root`](https://vite.dev/config/shared-options.html#root) that are denied by a file matching patt...
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published over 1 year ago • updated 3 months ago
### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
GHSA-4r4m-qw57-chr8 CVE-2025-31125 MODERATE published 5 months ago • updated about 1 month ago
### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the n...
Recent PRs
Package Details
Name: vite
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/vite
JSON API: View JSON
Security Advisories

13

Active advisories
HIGH 3
MODERATE 10
View All npm Advisories
Package Information
Description:

Native-ESM powered web dev build tool

Repository: https://github.com/vitejs/vite
Homepage: https://vite.dev
Latest Release: 6.3.5
4 months ago
Dependent Repos: 363,358
Dependent Packages: 31,388
Downloads: 105,034,023
Ranking: Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs
PR Status
Open 19,886 (40.9%)
Merged 9,699 (19.9%)
Closed 14,622 (30.1%)
PR Types
Removal 110 (0.2%)
Minor 8,485 (17.4%)
Major 18,583 (38.2%)
Patch 16,955 (34.9%)