V
Vendor security profile1 actively exploited CVEs
vitejs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV1
Public exploit5
Patch rate%17
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
3
0
1
0
0
0
0
CVE KEV
CVE severity distribution
6toplam CVE
High3 (50%)
Medium3 (50%)
Patch and exploitation view
%17
Verified patch
%17
CISA KEV
%83
Public exploit
1Patch available
0Partial
0Workaround
1Vendor: no patch
4Unknown
Latest vulnerabilities
7.5
CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windows
Patch status unknownEPSS %1
8.2
CVE-2026-39364Vite has a `server.fs.deny` bypass with queries
Patch status unknown Public Exploits:1EPSS %2
8.2
CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
Patch status unknown Public Exploits:1EPSS %3
5.3
CVE-2026-39365Path traversal in Vitejs
Patch status unknown Public Exploits:2EPSS %1
5.3
CVE-2025-58752Information exposure in Vitejs
Patch verified Public Exploits:1EPSS %1