Skip to content
Sign in
5.9 Medium

CVE-2024-31207 Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend…

Description

Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`server.fs.deny` does not deny requests for patterns with directories. This vulnerability has been patched in version(s) 5.2.6, 5.1.7, 5.0.13, 4.5.3, 3.2.10 and 2.9.18.

Affected products and versions

Product Affected versions Fixed in
vite 5.2 5.2.0 → 5.2.5 No fix stated
vite 5.1 5.1.0 → 5.1.6 No fix stated
vite 5.0 5.0.0 → 5.0.12 No fix stated
vite 4.0 4.0.0 → 4.5.2 No fix stated
vite 3.0 3.0.0 → 3.2.8 No fix stated
vite 2.7 2.7.0 → 2.9.17 No fix stated

Other CVEs of vite

The 28 CVEs of vite →
CVE-2026-118662 Vite is a frontend tooling framework for JavaScript 6.9 Medium CVE-2026-112947 Vite is a frontend tooling framework for JavaScript 6.3 Medium CVE-2026-112946 Vite is a frontend tooling framework for JavaScript 6.3 Medium CVE-2026-112945 Vite is a frontend tooling framework for JavaScript 2.1 Low
Track this CVE