Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served /__vitest_test__/ with the otelCarrier query parameter inserted directly into an inline module script, allowing a crafted browser-runner URL to execute arbitrary JavaScript in the Vitest server origin and recover VITEST_API_TOKEN for authenticated API calls. This issue is fixed in versions 4.1.6 and 5.0.0-beta.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-06 | 1 | General1 |
| 2026-07-16 | 1 | Patch1 |
⚠️ Linux prometheus3-13 alert: CVE-2026-47428 (CVSS 8.3) Attackers could execute arbitrary code. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-47428 #Linux #prometheus313 #RCE #CyberSecurity #CVE
Post summary
The advisory warns of a critical RCE in Linux Prometheus 3.13 and urges users to upgrade to the vendor‑fixed release.
> CVE-2026-47428 は私の知識カットオフ（2026年1月）より後に採番された可能性が高く、私はその内容を把握していません。 知ってはいたが、こうして見ると知識ベースが結構古いなあ。
Post summary
The user expresses lack of knowledge about CVE-2026-47428, indicating it was assigned after their knowledge cut‑off and providing no further vulnerability details.