@cloudflare/vite-plugin

1.64.0 · 14 Oct 2026MIT4M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @cloudflare/vite-plugin. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	1.64.0	Safe from 1.6.0
	0.1.21	2 open advisories, worst moderate · last release Apr 2025, no longer updated

Your version

Moderate
Cloudflare Vite plugin exposes secrets over the built-in dev serverGHSA-4pfg-2mw5-f8jx · 8 Jul 2025
- 1.x1.0.0 – 1.5.1Fixed in 1.6.0
- 0.1.x and older0.0.1 – 0.1.21No fix, no longer updated · move to 1.6.0

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.