Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions vitest may let attackers run code
published 8 days ago
Summary
The vitest tool used in GitHub Actions had four security weaknesses that could let an attacker execute unwanted code during a build. This could affect the integrity of your automated testing and deployment pipelines. Update to version 2.0.5‑tuxcare.1 as soon as possible to apply the fixes.
What to do
- Update GitHub Actions vitest to version 2.0.5-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | vitest |
>= 2.0.5-tuxcare.0, < 2.0.5-tuxcare.1 Fix: upgrade to 2.0.5-tuxcare.1
|
Original advisory text
TuxCare security update for vitest (4 CVEs)
TuxCare rebuilt vitest to address 4 CVEs. Fixed in 2.0.5-tuxcare.1.
Timeline
Published27 Oct 2026
Updated27 Oct 2026
First seen27 Oct 2026
Sources
CLSA-2026-1793093026 · OSV
Track software like this
Free during beta