cloudflare @cloudflare/vite-plugin vulnerabilities

Latest cloudflare @cloudflare/vite-plugin CVEs

Newest publication first

1. CVE-2025-59427 Cloudflare vite plugin exposes secrets over the built-in dev server

   Published 2025-09-19

   Low·CVSS 2.9 EPSS 0.38%

   The Cloudflare Vite plugin enables a full-featured integration between Vite and the Workers runtime. When utilising the Cloudflare Vite plugin in its default configuration, all files are exposed by the local dev server, including files in the root directory that contain secret in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.