Threats Tagged 'cve-2026-47429'
View all threats tagged with 'cve-2026-47429'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-47429'
Click on any threat for detailed analysis and mitigation recommendations
0 Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /__vitest_attachment__, allowing \\?\\..\\ path traversal to read files outside the project; exposed API write and rerun features such as saveTestFile and rerun could also allow arbitrary script execution. This issue is fixed in versions 3.2.5 and 4.1.0. Join the discussion | CVE Database V5 | 07/14/2026, 19:28:08 UTC Added: 07/14/2026, 19:33:57 UTC |
0 A critical security flaw (CVE-2026-47428) was identified in Vitest's Browser Mode, allowing remote attackers to execute arbitrary JavaScript code via a crafted browser-runner URL. This could lead to unauthorized access to the VITEST_API_TOKEN and further system compromise. However, Red Hat products do not include or enable Vitest Browser Mode, using Vitest only as a build/test-time dependency without the vulnerable component. Therefore, Red Hat's shipping products are not vulnerable to this issue. The update includes a bug fix and enhancement for Red Hat Hardened Images RPMs, specifically prometheus3.13 packages. Join the discussion | GCVE Database | 07/13/2026, 23:42:49 UTC Added: 07/19/2026, 19:38:27 UTC |
Showing 1 to 2 of 2 results