`vite`

Ecosystem:
npm

Package URL:
pkg:npm/vite

Total PRs:
48,817 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
17,026 repositories

Unique Repos (30 days):
5,577 repositories

Security Advisories

Vite's `server.fs.deny` did not deny requests for patterns with directories.

GHSA-8jhw-289h-jh2g CVE-2024-31207 MODERATE published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` did not deny requests for patte...

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

GHSA-mv48-hcvh-8jj8 CVE-2022-35204 HIGH published about 3 years ago • updated about 1 month ago

Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Vite's server.fs.deny bypassed with /. for files under project root

GHSA-859w-5945-r5v3 CVE-2025-46565 MODERATE published 4 months ago • updated 2 months ago

### Summary The contents of files in [the project `root`](https://vite.dev/config/shared-options.html#root) that are denied by a file matching patt...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

GHSA-4r4m-qw57-chr8 CVE-2025-31125 MODERATE published 5 months ago • updated about 1 month ago

### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the n...

View all 13 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps-dev): bump vite from 7.1.3 to 7.1.4 in /web-client

benhook1013/FireMUD #1753

7.1.3 → 7.1.4 Patch PR

Open about 2 hours ago 1 comment

Bump the dev group with 4 updates

kennygoff/kennygoff.com #133

7.1.3 → 7.1.4 Patch PR

Merged about 4 hours ago 1 comment

deps-dev(deps-dev): bump the build-tools group across 1 directory with 3 updates

techishthoughts/techishthoughts.github.io #67

7.1.2 → 7.1.4 Patch PR

Merged about 5 hours ago

Bump vite from 7.1.3 to 7.1.4

Yashkatiyar24/GENBOOK.AI #7

7.1.3 → 7.1.4 Patch PR

Open about 5 hours ago 2 comments

build(deps-dev): bump vite from 7.1.2 to 7.1.4

AmadeusITGroup/Svelvunity #84

7.1.2 → 7.1.4 Patch PR

Open about 7 hours ago 1 comment

[Demo Dependencies]: Bump the dependencies-dev group in /docs-src with 2 updates

elchininet/isometric-css #312

7.1.3 → 7.1.4 Patch PR

Merged about 8 hours ago 2 comments

Bump vite from 6.1.1 to 6.1.6 in /tanstack-router-file-based

solidjs/templates #185

6.1.1 → 6.1.6 Patch PR

Open about 10 hours ago

Bump vite from 6.1.1 to 6.1.6 in /tanstack-router-config-based

solidjs/templates #183

6.1.1 → 6.1.6 Patch PR

Merged about 10 hours ago

Bump vite from 7.1.3 to 7.1.4

navikt/meldekort-frontend #612

7.1.3 → 7.1.4 Patch PR

Open about 11 hours ago

build(deps-dev): bump vite from 5.4.14 to 5.4.19

harsha12a/ClothingStore #4

5.4.14 → 5.4.19 Patch PR

Closed about 11 hours ago 2 comments

Bump the npm-dev-dependencies group across 1 directory with 15 updates

syntatis/kubrick #157

7.1.3 → 7.1.4 Patch PR

Open about 12 hours ago

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates

sammywachtel/lyrics #21

7.1.2 → 7.1.4 Patch PR

Open about 12 hours ago 1 comment

Bump vite from 7.1.3 to 7.1.4

mollykannn/translate-hkscs-big5 #269

7.1.3 → 7.1.4 Patch PR

Merged about 14 hours ago

Bump vite from 7.1.3 to 7.1.4

mollykannn/3x3-Photo-Grid #256

7.1.3 → 7.1.4 Patch PR

Merged about 14 hours ago

Bump vite from 7.1.3 to 7.1.4

reindernijhoff/dittytoy-package #93

7.1.3 → 7.1.4 Patch PR

Open about 15 hours ago

Bump vite from 5.4.14 to 5.4.19

Stonefox36/coinbase-wallet-sdk #30

5.4.14 → 5.4.19 Patch PR

Open about 15 hours ago

chore(deps): bump the minor-and-patch group with 6 updates

ApzHuss/OgaalAI #1

7.1.3 → 7.1.4 Patch PR

Merged about 18 hours ago 1 comment

deps(typescript): Bump the typescript group across 1 directory with 8 updates

JackPlowman/actions-status #200

7.1.2 → 7.1.4 Patch PR

Open about 19 hours ago

chore(deps): bump the minor-and-patch group with 6 updates

ApzHuss/OgaalAI #8

7.1.3 → 7.1.4 Patch PR

Merged about 19 hours ago 1 comment

chore(deps-dev): bump the minor-and-patch group with 7 updates

patrykgawinek/gbifwebclient #108

7.1.3 → 7.1.4 Patch PR

Merged about 20 hours ago

Bump the npmdependencies group across 1 directory with 24 updates

TheClearSky/react-blender-nodes #26

7.1.1 → 7.1.4 Patch PR

Merged about 22 hours ago

Chore(deps-dev): Bump vite from 5.4.8 to 5.4.19 in /frontend

Owbird/One-Dev #39

5.4.8 → 5.4.19 Patch PR

Open about 22 hours ago

Bump vite from 7.1.3 to 7.1.4

web-scrobbler/web-scrobbler #5573

7.1.3 → 7.1.4 Patch PR

Open about 23 hours ago 1 comment

Bump vite from 6.3.1 to 6.3.5

tweakphp/tweakphp #172

6.3.1 → 6.3.5 Patch PR

Open 1 day ago

chore(deps): bump the minor-and-patch group across 1 directory with 11 updates

yaml292/yaml292.github.io #7

7.1.3 → 7.1.4 Patch PR

Open 1 day ago 1 comment

Bump vite from 7.1.3 to 7.1.4

josephrkramer/batuu-scanner2 #949

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

Bump the development-dependencies group with 3 updates

epicserve/django-base-site #1170

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

deps(npm): bump the npm-minor-patch group in /gui/web with 2 updates

maschkef/little-linux-helper #21

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

Bump vite from 7.1.3 to 7.1.4

appifyhub/the-agent-web-app #157

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

Bump vite from 7.1.3 to 7.1.4 in the vite group

shlinkio/shlink-dashboard #714

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite from 7.1.3 to 7.1.4 in the vite group

shlinkio/shlink-web-component #790

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite from 7.1.3 to 7.1.4 in the vite group

shlinkio/shlink-js-sdk #318

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite from 7.1.3 to 7.1.4 in the vite group

acelaya/react-external-link #449

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite from 7.1.3 to 7.1.4 in the vite group

shlinkio/shlink-api-spec-ui #689

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite

angelator312/Systezanie-1 #3

5.4.14 → 5.4.19 Patch PR

Open 1 day ago

Bump the all group across 1 directory with 15 updates

FrederikNorlyk/svelte-budget-planner #185

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

Bump vite from 7.1.3 to 7.1.4

accentor/api-client-js #654

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

Bump vite from 5.4.18 to 5.4.19

chinmay29hub/haiku-readme #69

5.4.18 → 5.4.19 Patch PR

Open 1 day ago

chore(deps-dev): bump the npm group with 3 updates

kieranbrown/portfolio #65

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump the dependencies group with 4 updates

PhotonicGluon/Photonic #50

7.1.3 → 7.1.4 Patch PR

Open 1 day ago

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

Jyf0214/site-status #2

4.5.5 → 4.5.14 Patch PR

Open 1 day ago

build(deps): bump the npm_and_yarn group across 1 directory with 6 updates

Jyf0214/site-status #1

4.5.5 → 4.5.14 Patch PR

Open 1 day ago

chore(deps-dev): bump vite from 7.1.3 to 7.1.4

sevilyilmaz/portfolio-comparator #281

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Chore(deps-dev): Bump vite from 7.1.3 to 7.1.4

nextcloud/forms #2907

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

Bump vite from 7.1.3 to 7.1.4 in /frontend

keithamoss/mapa #2250

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

build(deps-dev): bump the security group across 1 directory with 2 updates

replicatedhq/embedded-cluster #2809

7.1.3 → 7.1.4 Patch PR

Open 1 day ago 1 comment

Bump vite from 5.4.10 to 5.4.19

Ovotron-net/c-958300 #2

5.4.10 → 5.4.19 Patch PR

Open 1 day ago

chore(deps-dev): bump vite from 7.1.3 to 7.1.4

nextcloud/logreader #1729

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

chore(deps-dev): Bump vite from 7.1.3 to 7.1.4

nextcloud/app_template #161

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago

build(deps-dev): bump vite from 7.1.3 to 7.1.4

bervProject/my-personal-web #1845

7.1.3 → 7.1.4 Patch PR

Merged 1 day ago 1 comment

Package Details

Name:	`vite`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/vite`
JSON API:	View JSON

Security Advisories

13

Active advisories

HIGH 3

MODERATE 10

View All npm Advisories

Package Information

Description:

Native-ESM powered web dev build tool

Repository:	https://github.com/vitejs/vite
Homepage:	https://vite.dev
Latest Release:	`6.3.5` 4 months ago
Dependent Repos:	363,358
Dependent Packages:	31,388
Downloads:	105,034,023
Ranking:	Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs

PR Status

Open 19,930 (40.9%)

Merged 9,735 (20.0%)

Closed 14,657 (30.1%)

PR Types

Removal 113 (0.2%)

Minor 8,507 (17.4%)

Major 18,624 (38.2%)

Patch 17,004 (34.9%)