pkg:npm/@vitest/browser

All known vulnerabilities

• CRITICAL9.8CVE-2026-53633Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE
  >= 5.0.0-beta.0, < 5.0.0-beta.4
• CRITICAL9.6CVE-2026-47428Vitest browser mode serves unsanitized otelCarrier query parameter as inline script
  >= 4.0.17, < 4.1.6
• MEDIUM5.9CVE-2025-24963Vitest browser mode serves arbitrary files
  >= 2.0.4, < 2.1.9