@vitest/mocker vulnerabilities
CVEs whose affected-version data names the @vitest/mocker package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112950Medium· 5.9Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
▾ Sunlitvitest · @vitest/mockerEPSS 0.46%via GHSA
CVE-2026-84373Medium· 5.9Vitest is a testing framework powered by Vite
Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:regi…
▾ Sunlitvitest · @vitest/mockerEPSS 0.53%via NVD