CVE-2026-47428Published
Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /__vitest_test__/ with the otelCarrier query parameter inserted directly into an inline module script, allowing a crafted br…
Exact source revision recorded 25 Oct 2026 12:17:26 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-47428
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.