Package Health

@vitest/browser

Browser running for Vitest

Latest 5.0.4NPMNPM

96%

Total Score

healthy

Frequent releases, active repository work, and organization backing make this a mature, transparent release.

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-73653
@vitest/browser is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 4.0.0 - 4.1.10, 0.0.0 - 3.2.7 and 5.0.0-beta.1 - 5.0.0-beta.6.
0.0.0 - 3.2.74.0.0 - 4.1.105.0.0-beta.1 - 5.0.0-beta.6
Critical
CVE-2026-53633
@vitest/browser is vulnerable to Exposed Dangerous Method or Function in versions 5.0.0-beta.0 - 5.0.0-beta.3, 4.0.0 - 4.1.7 and 3.0.0 - 3.2.4.
3.0.0 - 3.2.44.0.0 - 4.1.75.0.0-beta.0 - 5.0.0-beta.3
Critical
CVE-2026-47428
@vitest/browser is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 4.0.17 - 4.1.6 and 5.0.0-beta.0 - 5.0.0-beta.3.
4.0.17 - 4.1.65.0.0-beta.0 - 5.0.0-beta.3
Critical
CVE-2025-24963
@vitest/browser is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 2.0.4 - 2.1.9 and 3.0.0 - 3.0.4.
2.0.4 - 2.1.93.0.0 - 3.0.4
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
ws
Version ^8.22.0
—
—
sirv
Version ^3.0.2
—
—
pngjs
Version ^7.0.0
—
—
@vitest/ui
Version 5.0.4
—
—
tinyrainbow
Version ^3.2.0
—
—

Weekly Downloads

Info

Last Published
14 hours ago
Created
4 years ago
Unpacked Size
0.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform