vitejs vite
productUScpe:2.3:a:vitejs:vite:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
critical
by severity
0critical7high6medium0low
updated 2026-10-27
01
vulnerabilities (14)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-31125US | high7.5OT critical | KEV |
| CVE-2025-30208US | high7.5 | Exploit |
| CVE-2026-39363US | high7.5OT elevated | Exploit |
| CVE-2026-53571US | high7.5 | Exploit |
| CVE-2023-34092US | high7.5 | — |
| CVE-2026-39364US | high7.5 | — |
| CVE-2022-35204US | medium4.3 | — |
| CVE-2025-46565US | medium5.3 | — |
| CVE-2025-58751US | medium5.3 | — |
| CVE-2023-49293US | medium6.1 | — |
| CVE-2026-39365US | medium5.3 | — |
| CVE-2024-23331US | high7.5 | — |
| CVE-2025-58752US | medium5.3 | — |
| CVE-2025-24010US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
- CWE-284Improper Access Control6 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
- CWE-1220Insufficient Granularity of Access Control1 CVEs
- CWE-1385Missing Origin Validation in WebSockets1 CVEs
- CWE-178Improper Handling of Case Sensitivity1 CVEs
- CWE-180Incorrect Behavior Order: Validate Before Canonicalize1 CVEs
- CWE-20Improper Input Validation1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE14 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan