`vite`

Ecosystem:
npm

Package URL:
pkg:npm/vite

Total PRs:
48,727 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
16,987 repositories

Unique Repos (30 days):
5,588 repositories

Security Advisories

Vite's `server.fs.deny` did not deny requests for patterns with directories.

GHSA-8jhw-289h-jh2g CVE-2024-31207 MODERATE published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` did not deny requests for patte...

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

GHSA-mv48-hcvh-8jj8 CVE-2022-35204 HIGH published about 3 years ago • updated about 1 month ago

Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Vite's server.fs.deny bypassed with /. for files under project root

GHSA-859w-5945-r5v3 CVE-2025-46565 MODERATE published 4 months ago • updated about 2 months ago

### Summary The contents of files in [the project `root`](https://vite.dev/config/shared-options.html#root) that are denied by a file matching patt...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

GHSA-4r4m-qw57-chr8 CVE-2025-31125 MODERATE published 5 months ago • updated about 1 month ago

### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the n...

View all 13 advisories

Recent PRs (filtered by: Open )

RSS Feed Clear filter

deps(typescript): Bump the typescript group across 1 directory with 8 updates

JackPlowman/actions-status #200

7.1.2 → 7.1.4 Patch PR

Open about 2 hours ago

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

ant-design/pro-components #9250

6.3.5 → 7.0.0 Major PR

Open about 4 hours ago

build(deps-dev): bump the dev-dependencies group with 9 updates

AustinKelsay/gtdspace #20

5.4.19 → 7.1.4 Major PR

Open about 4 hours ago

Chore(deps-dev): Bump vite from 5.4.8 to 5.4.19 in /frontend

Owbird/One-Dev #39

5.4.8 → 5.4.19 Patch PR

Open about 5 hours ago

Bump the npm_and_yarn group across 1 directory with 2 updates

kritsanan1/ayrsharesocialdashboard2012 #1

5.0.0 → 5.4.19 Minor PR

Open about 6 hours ago

Bump vite from 5.4.19 to 7.1.4

FranckyNtyam/Team-5 #4

5.4.19 → 7.1.4 Major PR

Open about 6 hours ago

Bump the npm_and_yarn group across 1 directory with 2 updates

kritsanan1/ayrshare_social_dashboard_2012 #1

5.0.0 → 5.4.19 Minor PR

Open about 6 hours ago 2 comments

Bump vite from 6.3.1 to 6.3.5

tweakphp/tweakphp #172

6.3.1 → 6.3.5 Patch PR

Open about 7 hours ago

deps(deps-dev): bump vite from 5.4.19 to 7.1.4

conteit/paolo-website #4

5.4.19 → 7.1.4 Major PR

Open about 7 hours ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates

yaml292/yaml292.github.io #7

7.1.3 → 7.1.4 Patch PR

Open about 7 hours ago 1 comment

Bump vite from 5.3.5 to 5.4.19

dkackman/Theme-o-rama #1

5.3.5 → 5.4.19 Minor PR

Open about 8 hours ago

Bump vite from 7.1.3 to 7.1.4

josephrkramer/batuu-scanner2 #949

7.1.3 → 7.1.4 Patch PR

Open about 9 hours ago

deps(deps-dev): bump the dev-dependencies group in /apps/web with 7 updates

Rivega42/emdr42 #14

5.4.19 → 7.1.4 Major PR

Open about 9 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 5 updates

AlexandrosLiaskos/CVIc #3

5.4.19 → 7.1.4 Major PR

Open about 10 hours ago

Bump vite from 4.5.14 to 7.1.4

hazelbag/pokedex #2

4.5.14 → 7.1.4 Major PR

Open about 11 hours ago 1 comment

Bump the npm_and_yarn group across 1 directory with 6 updates

engzaza/socialai_manager #1

5.0.0 → 5.4.19 Minor PR

Open about 11 hours ago

deps(npm): bump the npm-minor-patch group in /gui/web with 2 updates

maschkef/little-linux-helper #21

7.1.3 → 7.1.4 Patch PR

Open about 13 hours ago

Bump vite from 7.1.3 to 7.1.4

appifyhub/the-agent-web-app #157

7.1.3 → 7.1.4 Patch PR

Open about 14 hours ago

Bump vite

angelator312/Systezanie-1 #3

5.4.14 → 5.4.19 Patch PR

Open about 15 hours ago

Bump the all group across 1 directory with 15 updates

FrederikNorlyk/svelte-budget-planner #185

7.1.3 → 7.1.4 Patch PR

Open about 16 hours ago

Bump vite from 7.1.3 to 7.1.4

accentor/api-client-js #654

7.1.3 → 7.1.4 Patch PR

Open about 16 hours ago

Bump vite from 5.4.18 to 5.4.19

chinmay29hub/haiku-readme #69

5.4.18 → 5.4.19 Patch PR

Open about 16 hours ago

deps-dev(game-client)(deps-dev): bump vite from 5.4.19 to 7.1.4 in /apps/game-client

miguelsanz72/CITY-VILLE #37

5.4.19 → 7.1.4 Major PR

Open about 17 hours ago 1 comment

Bump vite from 5.2.10 to 5.4.19 in /Yak

OtherwiseJunk/Yet-Another-Acronym-Game #27

5.2.10 → 5.4.19 Minor PR

Open about 17 hours ago 1 comment

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

cheeseman2422/crypto-key-validator #7

5.4.19 → 7.1.4 Major PR

Open about 18 hours ago

Bump the dependencies group with 4 updates

PhotonicGluon/Photonic #50

7.1.3 → 7.1.4 Patch PR

Open about 18 hours ago

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

cheeseman2422/crypto-key-validator #6

5.4.19 → 7.1.4 Major PR

Open about 18 hours ago

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

Jyf0214/site-status #2

4.5.5 → 4.5.14 Patch PR

Open about 18 hours ago

build(deps): bump the npm_and_yarn group across 1 directory with 6 updates

Jyf0214/site-status #1

4.5.5 → 4.5.14 Patch PR

Open about 18 hours ago

Bump vite and @quasar/app-vite in /ecommerce-web

free-might-bobger/psr-4 #5

removed Removal PR

Open about 18 hours ago

chore(dev-deps): update vite requirement from ^7.0.6 to ^7.1.4 in /packages/EXAMPLE-MCP-PROVIDER

salesforcecli/mcp #192

^7.0.6 → ^7.1.4 Minor PR

Open about 19 hours ago 1 comment

chore(deps-dev): bump vite from 6.3.5 to 7.1.4

exile-watch/splinters #268

6.3.5 → 7.1.4 Major PR

Open about 19 hours ago

Bump vite from 6.2.4 to 6.3.5

Juuuuuh1/lexicon-clash #3

6.2.4 → 6.3.5 Minor PR

Open about 20 hours ago

Bump vite from 6.3.5 to 7.1.4

top-ace-wizard/wger-react #5

6.3.5 → 7.1.4 Major PR

Open about 20 hours ago

chore(deps-dev): bump vite from 6.3.5 to 7.1.4 in /client

tctalk-cn/akhq #45

6.3.5 → 7.1.4 Major PR

Open about 20 hours ago 1 comment

Bump vite from 6.3.5 to 7.1.4

jaypotter/Nextplate #17

6.3.5 → 7.1.4 Major PR

Open about 20 hours ago

Bump vite from 6.3.5 to 7.1.4

tobiasKaminsky/declarativetest #21

6.3.5 → 7.1.4 Major PR

Open about 20 hours ago

build(deps-dev): bump the security group across 1 directory with 2 updates

replicatedhq/embedded-cluster #2809

7.1.3 → 7.1.4 Patch PR

Open about 21 hours ago 1 comment

build(deps-dev): bump vite from 5.4.19 to 7.1.4

lnwlf2121/eros #15

5.4.19 → 7.1.4 Major PR

Open about 21 hours ago

Bump vite from 5.4.10 to 5.4.19

Ovotron-net/c-958300 #2

5.4.10 → 5.4.19 Patch PR

Open about 21 hours ago

chore(deps-dev): Bump vite from 5.4.19 to 7.1.4

nextcloud/profiler #618

5.4.19 → 7.1.4 Major PR

Open about 21 hours ago

Chore(deps-dev): Bump vite from 6.3.5 to 7.1.4

nextcloud/password_policy #818

6.3.5 → 7.1.4 Major PR

Open about 21 hours ago

chore(deps-dev): Bump vite from 6.3.5 to 7.1.4

nextcloud-libraries/nextcloud-files #1318

6.3.5 → 7.1.4 Major PR

Open about 21 hours ago

build(deps-dev): bump vite from 5.4.11 to 5.4.19

amp-labs/react #1313

5.4.11 → 5.4.19 Patch PR

Open about 21 hours ago

Bump vite from 5.4.19 to 7.1.4 in /frontend

ToQuery/wails3-build-action #6

5.4.19 → 7.1.4 Major PR

Open about 21 hours ago

build(deps-dev): bump vite from 7.1.3 to 7.1.4

Tosainu/tosainu.github.com #926

7.1.3 → 7.1.4 Patch PR

Open about 22 hours ago

Bump vite from 7.1.3 to 7.1.4

namelivia/plants-client #994

7.1.3 → 7.1.4 Patch PR

Open about 22 hours ago

Bump the npm_and_yarn group across 1 directory with 2 updates

matheus-rech/cv-presentation #1

5.4.19 → 7.1.4 Major PR

Open about 23 hours ago

Bump the npm_and_yarn group across 1 directory with 2 updates

GihanthaDeshabi/AI-Powered-Children-s-Digital-Addiction-Root-Cause-Prediction #1

5.4.19 → 7.1.4 Major PR

Open about 23 hours ago

Bump the npm_and_yarn group across 6 directories with 19 updates

ibiscum/Vue.js-3-Design-Patterns-and-Best-Practices #5

4.2.1 → 4.5.14 Minor PR

Open about 23 hours ago 1 comment

Package Details

Name:	`vite`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/vite`
JSON API:	View JSON

Security Advisories

13

Active advisories

HIGH 3

MODERATE 10

View All npm Advisories

Package Information

Description:

Native-ESM powered web dev build tool

Repository:	https://github.com/vitejs/vite
Homepage:	https://vite.dev
Latest Release:	`6.3.5` 4 months ago
Dependent Repos:	363,358
Dependent Packages:	31,388
Downloads:	105,034,023
Ranking:	Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs

PR Status

Open 19,886 (40.9%)

Merged 9,699 (19.9%)

Closed 14,622 (30.1%)

PR Types

Removal 110 (0.2%)

Minor 8,485 (17.4%)

Major 18,583 (38.2%)

Patch 16,955 (34.9%)