CVE-2026-84373
2 advisories.
npm/@vitest/mocker CVE-2026-84373: medium 5.9, EPSS 0.53%
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
Action: Upgrade @vitest/mocker to 4.1.11 or later.
npm i @vitest/mocker@4.1.11npm i @vitest/mocker@5.0.0-rc.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 4.1.11 | - |
| 5.0.0-beta.1 | 5.0.0-rc.2 | - |
Fixed versions
| 4.1.11 | 5.0.0-rc.2 |
Sources
- osv: GHSA-82fw-gwwq-j7x9
- https://github.com/vitest-dev/vitest/security/advisories/GHSA-82fw-gwwq-j7x9
- https://nvd.nist.gov/vuln/detail/CVE-2026-84373
- https://github.com/vitest-dev/vitest/pull/10972
- https://github.com/vitest-dev/vitest/pull/10974
- https://github.com/vitest-dev/vitest/commit/51edf2b072902aec6d30c90ebaafd8f121c6f9d8
- https://github.com/vitest-dev/vitest/commit/8ff9b9a9efca7c6cfd5243569440de8d7a33aec4
- https://github.com/vitest-dev/vitest/commit/fe5a11d3ceac5ec10d6d7d21a46d4caca132c48f
- https://github.com/vitest-dev/vitest
- https://github.com/vitest-dev/vitest/releases/tag/v4.1.11
- https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-rc.2
CVE-2026-84373 · published · modified · JSON
npm/vitest CVE-2026-84373: medium 5.9, EPSS 0.53%
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
Action: Upgrade vitest to 4.1.11 or later.
npm i vitest@4.1.11npm i vitest@5.0.0-rc.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 4.1.11 | - |
| 5.0.0-beta.1 | 5.0.0-rc.2 | - |
Fixed versions
| 4.1.11 | 5.0.0-rc.2 |
Sources
- osv: GHSA-82fw-gwwq-j7x9#npm/vitest
- https://github.com/vitest-dev/vitest/security/advisories/GHSA-82fw-gwwq-j7x9
- https://nvd.nist.gov/vuln/detail/CVE-2026-84373
- https://github.com/vitest-dev/vitest/pull/10972
- https://github.com/vitest-dev/vitest/pull/10974
- https://github.com/vitest-dev/vitest/commit/51edf2b072902aec6d30c90ebaafd8f121c6f9d8
- https://github.com/vitest-dev/vitest/commit/8ff9b9a9efca7c6cfd5243569440de8d7a33aec4
- https://github.com/vitest-dev/vitest/commit/fe5a11d3ceac5ec10d6d7d21a46d4caca132c48f
- https://github.com/vitest-dev/vitest
- https://github.com/vitest-dev/vitest/releases/tag/v4.1.11
- https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-rc.2
CVE-2026-84373 · published · modified · JSON