Vite

vitejs.dev ↗ ⚠ 1 CISA KEV
C
CAUTION
18
Total CVEs
3
Crit / High
8
Medium
6%
Unpatched
82%
Patched
6.2
Avg CVSS
1
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
82%
Unpatched
6%
Under Review
12%
✓ 14 patched ✗ 1 unpatched ~ 2 under review
▸ Intelligence by Audience
PoC Available
9 / 20 shown
CISA KEV (Exploited)
1
Shodan Dorks
ssl:"vite" port:443
org:"Vite" http.status:200
Top EPSS (Exploitation Probability)
CVE-2025-30208 74.97% exploitation probability
CVE-2025-31125 65.19% exploitation probability
CVE-2025-31486 40.46% exploitation probability
CVE-2023-34092 3.13% exploitation probability
CVE-2025-32395 1.75% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
18
Critical severity
0
Actively exploited (CISA)
1
Unpatched ratio
6%
Avg CVSS score
6.2
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-11
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
French supermarkets hacked: Danfoss vulnerabilities blamed - thestack.technology
thestack.technology 3d ago
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers - The Hacker News
The Hacker News 2026-09-15
Hackers Mass-Scan Exposed Vite Servers to Steal AWS and Azure Cloud Credentials - CyberSecurityNews
CyberSecurityNews 2026-09-14
CISA confirms active exploitation of four enterprise software bugs - BleepingComputer
BleepingComputer 2026-01-23
Exploitation of Critical Vulnerability in React Server Components (Updated December 12) - Unit 42
Unit 42 2025-12-12
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities - The Hacker News
The Hacker News 2026-01-23
▸ Recent CVEs showing 20 of 17
CVE IDSeverityPatchEPSSDate
CVE-2025-68155 7.5 HIGH PATCHED / FIX AVAILABLE 0.51% 2025-12-16
CVE-2025-67489 9.8 CRITICAL PATCH UNDER REVIEW 0.81% 2025-12-09
CVE-2025-62522 PoC 6.0 MEDIUM PATCHED / FIX AVAILABLE 1.05% 2025-10-20
CVE-2025-58752 2.3 LOW PATCHED / FIX AVAILABLE 0.61% 2025-09-08
CVE-2025-58751 PoC 2.3 LOW PATCHED / FIX AVAILABLE 1.21% 2025-09-08
CVE-2025-46565 PoC 6.0 MEDIUM PATCHED / FIX AVAILABLE 1.16% 2025-05-01
CVE-2025-32395 PoC 6.0 MEDIUM UNKNOWN / UNPATCHED 1.75% 2025-04-10
CVE-2025-31486 PoC 5.3 MEDIUM PATCHED / FIX AVAILABLE 40.46% 2025-04-03
CVE-2025-31125 KEV PoC 5.3 MEDIUM PATCH UNDER REVIEW 65.19% 2025-03-31
CVE-2025-30208 PoC 5.3 MEDIUM PATCHED / FIX AVAILABLE 74.97% 2025-03-24
CVE-2025-24010 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.29% 2025-01-20
CVE-2024-45812 6.4 MEDIUM PATCHED / FIX AVAILABLE 0.64% 2024-09-17
CVE-2024-45811 4.8 MEDIUM PATCHED / FIX AVAILABLE 1.06% 2024-09-17
CVE-2024-31207 5.9 MEDIUM PATCHED / FIX AVAILABLE 0.71% 2024-04-04
CVE-2024-23331 7.5 HIGH PATCHED / FIX AVAILABLE 0.78% 2024-01-19
CVE-2023-49293 PoC 6.1 MEDIUM PATCHED / FIX AVAILABLE 1.00% 2023-12-04
CVE-2023-34092 PoC 7.5 HIGH PATCHED / FIX AVAILABLE 3.13% 2023-06-01
View all 17 CVEs for Vite →
▸Intel
Founded2020
Trust ScoreC — CAUTION
Max CVSS7.5
Last Updated2026-07-11
▸Top Weaknesses
CWE-22
Unknown Weakness Type
8 occurrences in Vite CVEs (44% of total)
CWE-22 ⓘ
8
CWE-200
Sensitive Information Exposure
4 occurrences in Vite CVEs (22% of total)
CWE-200 ⓘ
4
CWE-942
Unknown Weakness Type
1 occurrence in Vite CVEs (6% of total)
CWE-942 ⓘ
1
CWE-284
Improper Access Control
1 occurrence in Vite CVEs (6% of total)
CWE-284 ⓘ
1
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Vite CVEs (6% of total)
CWE-79 ⓘ
1
CWE-552
Unknown Weakness Type
1 occurrence in Vite CVEs (6% of total)
CWE-552 ⓘ
1
CWE-50
Unknown Weakness Type
1 occurrence in Vite CVEs (6% of total)
CWE-50 ⓘ
1
CWE-80
Unknown Weakness Type
1 occurrence in Vite CVEs (6% of total)
CWE-80 ⓘ
1
▸Company Profile

Vite is an open-source build tool and development server for modern web applications, created by Evan You. It is widely used in the JavaScript ecosystem for its fast hot module replacement and optimized production builds. While Vite itself is not a typical enterprise software vendor, its widespread adoption in web development makes it a relevant component in the software supply chain, and vulnerabilities in its dependencies or plugins could impact security.

▸Response Metrics
Est. MTTR ⓘ ~61 days (Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -80% better
CVE count 2026 vs 2025:  10 → 2 CVEs
Patch Speed ⓘ Poor (>65% open)
6% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€607K
Est. GDPR High
€6.1M

Based on 0 critical CVEs, 1 CISA KEV, 94% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Vite C valtersit.com