`vite`

Ecosystem:
npm

Package URL:
pkg:npm/vite

Total PRs:
48,735 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
16,991 repositories

Unique Repos (30 days):
5,591 repositories

Security Advisories

Vite's `server.fs.deny` did not deny requests for patterns with directories.

GHSA-8jhw-289h-jh2g CVE-2024-31207 MODERATE published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` did not deny requests for patte...

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

GHSA-mv48-hcvh-8jj8 CVE-2022-35204 HIGH published about 3 years ago • updated about 1 month ago

Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.

Vite's server.fs.deny bypassed with /. for files under project root

GHSA-859w-5945-r5v3 CVE-2025-46565 MODERATE published 4 months ago • updated about 2 months ago

### Summary The contents of files in [the project `root`](https://vite.dev/config/shared-options.html#root) that are denied by a file matching patt...

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

GHSA-c24v-8rfc-w8vw CVE-2024-23331 HIGH published over 1 year ago • updated 3 months ago

### Summary [Vite dev server option](https://vitejs.dev/config/server-options.html#server-fs-deny) `server.fs.deny` can be bypassed on case-insensi...

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

GHSA-4r4m-qw57-chr8 CVE-2025-31125 MODERATE published 5 months ago • updated about 1 month ago

### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the n...

View all 13 advisories

Recent PRs (filtered by: Removal PRs )

RSS Feed Clear filter

Bump vite and @quasar/app-vite in /ecommerce-web

free-might-bobger/psr-4 #5

removed Removal PR

Open about 20 hours ago

Bump vite and @angular-devkit/build-angular

mlsikora/mlsikora.github.io #6

removed Removal PR

Open 2 days ago

Bump vite and @angular-devkit/build-angular in /static/skywire-manager-src

skycoin/skywire #2040

removed Removal PR

Open 3 days ago 2 comments

Bump vite and vuepress

lando/events #44

removed Removal PR

Closed 3 days ago 2 comments

Bump vite and vuepress

lando/website #65

removed Removal PR

Open 3 days ago

Bump vite and @angular-devkit/build-angular in /frontend-snippets

zeewelc/music-website #6

removed Removal PR

Open 4 days ago

Bump vite and vuepress

GleapSDK/VuePress-Example #3

removed Removal PR

Open 11 days ago

Bump vite and @angular-devkit/build-angular in /src/Cynosura.Template.Web.Ng

CynosuraPlatform/Cynosura.Template #58

removed Removal PR

Open 11 days ago

Bump vite and @angular-devkit/build-angular

ianwesterfield/westerfield #16

removed Removal PR

Closed 17 days ago 1 comment

chore(deps): bump vite and vuepress

dnslink-std/dnslink-website #42

removed Removal PR

Open 20 days ago

chore(deps): bump vite and vitest

Tehen1/walletconnect-monorepo #2

removed Removal PR

Open 22 days ago

Bump vite and @angular-devkit/build-angular in /web

k0swe/forester #3305

removed Removal PR

Closed 28 days ago 1 comment

Bump vite and @angular-devkit/build-angular in /web

RMHAM/co-ares-catalog #131

removed Removal PR

Closed about 1 month ago 2 comments

Bump vite and @angular-devkit/build-angular

monsterbrain/angularhttptutorial #33

removed Removal PR

Open about 1 month ago

Bump vite and @angular-devkit/build-angular

CodeIbo/Creator-Front-end #14

removed Removal PR

Open about 1 month ago

chore(deps): bump vite and @angular-devkit/build-angular

Pascalmh/wielangenoch.biz #240

removed Removal PR

Open about 1 month ago 1 comment

Bump vite and @angular-devkit/build-angular

shortfastgood/bootstap-seed #34

removed Removal PR

Closed about 2 months ago 1 comment

Bump vite and @angular-devkit/build-angular

ferreiradluan/angular-test #11

removed Removal PR

Merged about 2 months ago

chore(deps): bump vite and @angular-devkit/build-angular in /subtree/harbor/src/portal

AlaudaDevops/harbor-helm #46

removed Removal PR

Open about 2 months ago

build(deps): bump vite and @angular-devkit/build-angular in /test-app

evva-sfw/capacitor-secure-storage-plugin #51

removed Removal PR

Closed about 2 months ago

Bump vite and @angular-devkit/build-angular

robertIsaac/angular-localization #49

removed Removal PR

Open about 2 months ago

Bump vite and @angular-devkit/build-angular in /software/nbia-uat

CBIIT/NBIA-TCIA #52

removed Removal PR

Open about 2 months ago

Bump vite and @angular-devkit/build-angular

amagovpt/observatory #13

removed Removal PR

Open about 2 months ago

chore(deps): bump vite and @angular-devkit/build-angular in /src/portal

groq/harbor #14

removed Removal PR

Open 2 months ago

Bump vite and @angular-devkit/build-angular in /web

joshua81/phonoteke #95

removed Removal PR

Closed 2 months ago 1 comment

Bump vite and @angular-devkit/build-angular in /src

ikemtz/AngularMonoRepo #588

removed Removal PR

Merged 2 months ago 1 comment

Bump vite and @angular-devkit/build-angular in /mur_server/gui/udrobot

juanscelyg/mur #24

removed Removal PR

Merged 2 months ago

Bump vite and typeit-react

benmneb/mui-image #48

removed Removal PR

Closed 3 months ago

Bump vite and @angular-devkit/build-angular in /src/web_old

comcy/skiclub-kapfenburg.de #102

removed Removal PR

Open 3 months ago

Bump vite and @angular-devkit/build-angular

IceBreakerG/ngx-version-check #70

removed Removal PR

Open 3 months ago

Bump vite and @angular-devkit/build-angular

PermanentOrg/web-app #579

removed Removal PR

Open 3 months ago

mgr/dashboard: bump vite and @angular-devkit/build-angular in /src/pybind/mgr/dashboard/frontend

ceph/ceph #63891

removed Removal PR

Open 3 months ago

Bump vite and @angular-devkit/build-angular

safe-fleet/ngx-translate-plugins #19

removed Removal PR

Closed 3 months ago 1 comment

chore(deps): bump vite and @angular-devkit/build-angular

skunkteam/sherlock #87

removed Removal PR

Open 3 months ago

Bump vite and @angular-devkit/build-angular in /frontend

NCIEVS/evs-explore #368

removed Removal PR

Closed 3 months ago 1 comment

chore(deps): bump vite and @angular-devkit/build-angular

scheduleonce/once-ui #1356

removed Removal PR

Open 3 months ago

Bump vite and @angular-devkit/build-angular in /software/nbia-uat

CBIIT/NBIA-TCIA #47

removed Removal PR

Merged 3 months ago

Bump vite and @angular-devkit/build-angular in /ssr

3ddesign/angular_test #686

removed Removal PR

Merged 3 months ago

build(deps): bump vite and @angular-devkit/build-angular

openMF/web-app #2467

removed Removal PR

Closed 4 months ago 1 comment

Bump vite and @angular-devkit/build-angular

jrquick17/ng-speed-test #102

removed Removal PR

Closed 4 months ago 1 comment

Bump vite and @angular-devkit/build-angular

CouchTec-Software-GmbH/shopping-cart-angular #45

removed Removal PR

Merged 4 months ago

Bump vite and @angular-devkit/build-angular in /ang-ocpa-ro

octavian-paraschiv/ocpa.ro #56

removed Removal PR

Closed 4 months ago

chore(dependencies): bump vite and @angular-devkit/build-angular

techexpertspro/portal-ascepa #497

removed Removal PR

Open 4 months ago 3 comments

chore(deps): bump vite and @angular-devkit/build-angular

SonyaMoisset/TOH_ANGULAR7 #1415

removed Removal PR

Open 4 months ago 1 comment

Bump vite and @angular-devkit/build-angular in /UI/ThriveChurchMediaToolUI

ThriveCommunityChurch/ThriveAPIMediaTool #64

removed Removal PR

Closed 4 months ago 1 comment

Bump vite and @angular-devkit/build-angular in /ui

ministryofjustice/ndelius-um #919

removed Removal PR

Closed 4 months ago 1 comment

Bump vite and nuxt

darkbearru/adrenaline #22

removed Removal PR

Merged 4 months ago

build(deps): bump vite and @angular-devkit/build-angular in /simulator-ui

citrusframework/citrus-simulator #332

removed Removal PR

Open 4 months ago

Bump vite and nuxt in /website

marcelreppi/moodle-buddy #77

removed Removal PR

Closed 4 months ago 1 comment

Bump vite and @angular-devkit/build-angular

casteroid/webcam-mirror #20

removed Removal PR

Open 4 months ago

Package Details

Name:	`vite`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/vite`
JSON API:	View JSON

Security Advisories

13

Active advisories

HIGH 3

MODERATE 10

View All npm Advisories

Package Information

Description:

Native-ESM powered web dev build tool

Repository:	https://github.com/vitejs/vite
Homepage:	https://vite.dev
Latest Release:	`6.3.5` 4 months ago
Dependent Repos:	363,358
Dependent Packages:	31,388
Downloads:	105,034,023
Ranking:	Top 0.0591% by dependent repos Top 0.036% by downloads Top 0.0036% by dependent pkgs

PR Status

Open 19,886 (40.9%)

Merged 9,699 (19.9%)

Closed 14,622 (30.1%)

PR Types

Removal 110 (0.2%)

Minor 8,485 (17.4%)

Major 18,583 (38.2%)

Patch 16,955 (34.9%)