npm/vite-plus CVE-2026-112945: low
Vite: Cross origin script execution through Vite custom middleware
Action: Upgrade vite-plus to 1.1.0 or later.
npm i vite-plus@1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-9jrq-w75r-8gcw#npm/vite-plus
- https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw
- https://nvd.nist.gov/vuln/detail/CVE-2026-112945
- https://github.com/vitejs/vite/pull/23653
- https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17
- https://github.com/vitejs/vite
CVE-2026-112945 · published · modified · JSON