What’s Vulnerable › Products

Voidzero Vite+ vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Voidzero Vite+ version is affected

Latest Voidzero Vite+ vulnerabilities

• CVE-2026-53571 — Vite: `server.fs.deny` bypass on Windows alternate paths (CVSS 7.5)
• CVE-2026-41211 — `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME` (CVSS 10.0)
• CVE-2026-39365 — Vite has a Path Traversal in Optimized Deps `.map` Handling (CVSS 5.3)
• CVE-2026-39364 — Vite has a `server.fs.deny` bypass with queries (CVSS 7.5)
• CVE-2026-39363 — Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket (CVSS 7.5)