Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 9 MIN AGO
T-9M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-73653
Vitest: Browser Mode provider commands bypass the file-access permission gate
Critical
PUBLISHED
CNA: GitHub_M
Base score
9.4
CVSS v3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
View raw JSON
CVE Program record
02
Description
CNA: GitHub_M
Vitest: Browser Mode provider commands bypass the file-access permission gate
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 18:19Z
1 DAY AGO
Last updated
2026-08-13 18:42Z
23 HR AGO
Reserved
2026-08-13
Assigning CNA
GitHub_M
Record state
PUBLISHED
Severity
Critical (CVSS 9.4)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-22
CWE-552
CWE-862
SSVC decision
Exploitation
none
Automatable
yes
Technical Impact
total
Data version
5.2
Document digest
0ca96ca548d949d539df846f64859b72875d0c402a379df997f6193b63eba8ca
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
vitest-dev
vitest
< 3.2.7, >= 4.0.0, < 4.1.10, >= 5.0.0-beta.1, < 5.0.0-beta.6
—
05
References
REFS: 10
github.com
https://github.com/vitest-dev/vitest/security/advisories/GHSA-p63j-vcc4-9vmv
x_refsource_CONFIRM
github.com
https://github.com/vitest-dev/vitest/pull/10674
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/pull/10679
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/pull/10680
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/commit/33f96a145ef09ca6a43b4e555eb273e64a87be23
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/commit/b795e36b34969bec50b47a9f29d26f799a6a04fb
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/releases/tag/v3.2.7
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/releases/tag/v4.1.10
x_refsource_MISC
github.com
https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-beta.6
x_refsource_MISC