By vendor

Vitejs vulnerabilities

Known CVEs affecting Vitejs products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-53571HIGH 7.5

  Vite, a popular JavaScript frontend build tool, has a vulnerability on Windows systems that allows attackers to read sensitive files—like environment variables and SSL certificates—that should be blocked. The vulnerability exploits Windows-specific file path features (NTFS Alternate Data Streams and 8.3 short filenames) that Vite's security checks don't properly handle. An unauthenticated attacker on the network can request these files directly from the dev server and receive their contents, bypassing the intended protections.