Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
vitest/coverage-istanbul may let attacker run code
published 19 days ago
Summary
The @vitest/coverage-istanbul package contains a security weakness that could allow a malicious user to execute code on your system. This matters because it could let attackers compromise the applications that use this package. Upgrade to version 3.2.4-tuxcare.4 as soon as possible to fix the issue.
What to do
- Update vitest @vitest/coverage-istanbul to version 3.2.4-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | vitest | @vitest/coverage-istanbul |
>= 3.2.4-tuxcare.0, < 3.2.4-tuxcare.4 Fix: upgrade to 3.2.4-tuxcare.4
|
Original advisory text
TuxCare security update for @vitest/coverage-istanbul (1 CVE)
TuxCare rebuilt @vitest/coverage-istanbul to address 1 CVE. Fixed in 3.2.4-tuxcare.4.
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792161653 · OSV
Track software like this
Free during beta