CVE-2026-84373 | vitest-dev vitest up to 4.1.10 Interceptor Plugin interceptorPlugin.ts load redirect/pathname

September 1, 2026 Yanac

A vulnerability was found in vitest-dev vitest up to 4.1.10 and classified as problematic. This issue affects the function Load of the file packages/mocker/src/node/interceptorPlugin.ts of the component Interceptor Plugin. Such manipulation of the argument redirect/pathname leads to open redirect.

This vulnerability is referenced as CVE-2026-84373. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More