Voidzero-dev vulnerabilities
We track 1 vulnerability in Voidzero-dev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Voidzero-dev vulnerabilities
- 10.0 Critical severity
vite-plus: Improper Limitation of a Pathname to a Restricted Directory
Vite+ is a unified toolchain and entry point for web development. Prior to version 0.1.17, `downloadPackageManager()` accepts an untrusted `version` string and uses it directly in filesystem paths. A caller can supply `../` segments or an absolute path to esca