CVE-2026-41211
1 advisory.
npm/vite-plus CVE-2026-41211: critical 10
Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME
Action: Upgrade vite-plus to 0.1.17 or later.
npm i vite-plus@0.1.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.17 | - |
Fixed versions
| 0.1.17 |
Sources
- osv: GHSA-33r3-4whc-44c2
- https://github.com/voidzero-dev/vite-plus/security/advisories/GHSA-33r3-4whc-44c2
- https://nvd.nist.gov/vuln/detail/CVE-2026-41211
- https://github.com/voidzero-dev/vite-plus
CVE-2026-41211 · published · modified · JSON