vitejs vite-plugin-react vulnerabilities

2 published CVEs name vitejs vite-plugin-react among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 1
Known exploited: 0

Critical 1High 1Medium 0Low 0Not scored 0

Newest CVEs

CVE-2025-68155
@vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development
vitejs · vite-plugin-react
High7.5
CVE-2025-67489
@vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server
vitejs · vite-plugin-react
Critical9.8

Most common weaknesses