Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Explore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.
Vite bundler for Nuxt
^1.6.4^6.1.7^8.3.5^2.0.3^2.0.0-rc.24^0.2.11^3.4.2^9.9.0^1.1.3^8.5.31^1.7.2^4.3.0^1.3.04.6.3^10.0.0^2.4.0^6.0.0^10.6.1^4.0.0^0.1.1^0.1.1^3.2.0^0.3.1^6.0.10^0.14.5^2.4.0^5.0.0^5.1.6Fetched 31/10/2026, 03:04:13 UTC · Original registry metadata
Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.
| Affected range | Recorded fix |
|---|---|
| From 4.6.0 before 4.6.3Semantic versions | 4.6.3 |
Version evidence: OSV · GHSA-3xf4-9g3c-4h4w
{
"ranges": [
{
"events": [
{
"introduced": "4.6.0"
},
{
"fixed": "4.6.3"
}
],
"type": "SEMVER"
}
],
"versions": []
}| Affected range | Recorded fix |
|---|---|
| From 3.0.0 before 4.6.3Semantic versions | 4.6.3 |
Version evidence: OSV · GHSA-648h-gw55-m2g7
{
"ranges": [
{
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "4.6.3"
}
],
"type": "SEMVER"
}
],
"versions": []
}| Affected range | Recorded fix |
|---|---|
| From 4.6.0 before 4.6.3Semantic versions | 4.6.3 |
Version evidence: OSV · GHSA-x287-wcfc-q46c
{
"ranges": [
{
"events": [
{
"introduced": "4.6.0"
},
{
"fixed": "4.6.3"
}
],
"type": "SEMVER"
}
],
"versions": []
}