@vitest/spy

5.0.5 · 15 Oct 2026MIT202.7M / weekRepository Homepage npm Atom feed

Your version

2.1.9

3 Feb 2025Where it was published

In short

2 security2 fixed

security
Browser mode serves arbitrary files | CVE-2025-24963
security
Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

Release note

This release includes security patches for:

security
Browser mode serves arbitrary files | CVE-2025-24963
security
Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

Bug Fixes

Backport #7317 to v2
(backport #7340 to v2) restrict served files from /__screenshot-error