CVE-2026-112948 | vitest-dev Vitest up to 5.0.4 Server Fs Deny information disclosure

October 20, 2026 Yanac

A vulnerability classified as problematic was found in vitest-dev Vitest up to 5.0.4. This affects an unknown part of the component Server Fs Deny. Executing a manipulation can lead to information disclosure.

This vulnerability is tracked as CVE-2026-112948. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More