Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
vitest/mocker could allow remote code execution
published 19 days ago
Summary
The @vitest/mocker package used in your projects has a security weakness that could let an attacker run malicious code on your system. TuxCare has released a patched version (4.0.18-tuxcare.1) that fixes the issue. Update the package to the new version as soon as possible to protect your environment.
What to do
- Update vitest @vitest/mocker to version 4.0.18-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | vitest | @vitest/mocker |
>= 4.0.18-tuxcare.0, < 4.0.18-tuxcare.1 Fix: upgrade to 4.0.18-tuxcare.1
|
Original advisory text
TuxCare security update for @vitest/mocker (1 CVE)
TuxCare rebuilt @vitest/mocker to address 1 CVE. Fixed in 4.0.18-tuxcare.1.
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792161765 · OSV
Track software like this
Free during beta