What’s Vulnerable › Products

@vitest mocker vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your @vitest mocker version is affected

Latest @vitest mocker vulnerabilities

• CVE-2026-112949 — Vitest: Code injection via unauthenticated manual mock registration (CVSS 4.7)
• CVE-2026-112950 — Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix (CVSS 5.9)
• CVE-2026-84373 — Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (CVSS 5.9)