Skip to content
Noroxi

voidzero records

5 published records for vendor voidzero.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2026-39363
    33Monitor

    Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

    HighCVSS 8.2Proof of conceptEPSS 3%

    vitejs · viteApr 7, 2026

  • CVE-2026-39364
    33Monitor

    Vite has a `server.fs.deny` bypass with queries

    HighCVSS 8.2Proof of conceptEPSS 2%

    vitejs · viteApr 7, 2026

  • CVE-2026-41211
    33Monitor

    `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`

    HighCVSS 8.4No exploitEPSS 0%

    voidzero · vite+Apr 23, 2026

  • CVE-2026-53571
    32Monitor

    Vite: `server.fs.deny` bypass on Windows alternate paths

    HighCVSS 8.2Proof of conceptEPSS 0%

    vitejs · viteJun 22, 2026

  • CVE-2026-39365
    25Monitor

    Vite has a Path Traversal in Optimized Deps `.map` Handling

    MediumCVSS 6.3Proof of conceptEPSS 0%

    vitejs · viteApr 7, 2026