Every CVE whose affected-product data names Vitest.dev Vitest, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2025-24964 — CVSS 9.6 (critical): Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious…
CVE-2025-24963 — CVSS 5.9 (medium): Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on…