{
  "@id": "urn:uuid:3c0f0f29-0972-4bbc-9103-12d77c1059ea",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 10,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T14:47:00.151806+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:25:00.217895+00:00",
      "status_notes": "Vulnerability CVE-2024-23331 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2024-23331"
      },
      "action_statement": "Vulnerability CVE-2024-23331 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:25:00.217895+00:00",
      "status_notes": "Vulnerability CVE-2024-31207 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2024-31207"
      },
      "action_statement": "Vulnerability CVE-2024-31207 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:25:00.217895+00:00",
      "status_notes": "Vulnerability CVE-2024-45811 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2024-45811"
      },
      "action_statement": "Vulnerability CVE-2024-45811 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:25:00.217895+00:00",
      "status_notes": "Vulnerability CVE-2025-24010 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2025-24010"
      },
      "action_statement": "Vulnerability CVE-2025-24010 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:25:00.217895+00:00",
      "status_notes": "Vulnerability CVE-2025-46565 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2025-46565"
      },
      "action_statement": "Vulnerability CVE-2025-46565 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:26:56.184488+00:00",
      "status_notes": "Vulnerability CVE-2025-58751 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2025-58751"
      },
      "action_statement": "Vulnerability CVE-2025-58751 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:26:56.184488+00:00",
      "status_notes": "Vulnerability CVE-2025-58752 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2025-58752"
      },
      "action_statement": "Vulnerability CVE-2025-58752 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:26:56.184488+00:00",
      "status_notes": "Vulnerability CVE-2025-62522 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2025-62522"
      },
      "action_statement": "Vulnerability CVE-2025-62522 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-20T19:57:00.094462+00:00",
      "status_notes": "Vulnerability CVE-2026-112942 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-112942"
      },
      "action_statement": "Vulnerability CVE-2026-112942 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-20T18:59:00.099754+00:00",
      "status_notes": "Vulnerability CVE-2026-112943 does not affect version 8.0.8-tuxcare.1 of vite. not_affected \u2014 CVE-2026-112943 affects the launch-editor package (v2.14.1), which is a declared dependency of Vite through launch-editor-middleware@2.14.1. The vulnerable code pattern (improper % escaping on Windows when passing arguments to cmd.exe) is not present in Vite's source code itself. While Vite exposes this functionality via the /__open-in-editor endpoint, the vulnerability exists only in the exter...",
      "vulnerability": {
        "name": "CVE-2026-112943"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-112943 affects the launch-editor package (v2.14.1), which is a declared dependency of Vite through launch-editor-middleware@2.14.1. The vulnerable code pattern (improper % escaping on Windows when passing arguments to cmd.exe) is not present in Vite's source code itself. While Vite exposes this functionality via the /__open-in-editor endpoint, the vulnerability exists only in the exter..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-20T19:57:00.094462+00:00",
      "status_notes": "Vulnerability CVE-2026-112944 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-112944"
      },
      "action_statement": "Vulnerability CVE-2026-112944 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T16:56:00.092611+00:00",
      "status_notes": "Vulnerability CVE-2026-112945 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-112945"
      },
      "action_statement": "Vulnerability CVE-2026-112945 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T16:56:40.126672+00:00",
      "status_notes": "Vulnerability CVE-2026-112946 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-112946"
      },
      "action_statement": "Vulnerability CVE-2026-112946 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T16:45:45.459074+00:00",
      "status_notes": "Vulnerability CVE-2026-118662 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-118662"
      },
      "action_statement": "Vulnerability CVE-2026-118662 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:47:00.151806+00:00",
      "status_notes": "Vulnerability CVE-2026-39363 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-39363"
      },
      "action_statement": "Vulnerability CVE-2026-39363 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:47:00.151806+00:00",
      "status_notes": "Vulnerability CVE-2026-39364 affects version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-39364"
      },
      "action_statement": "Vulnerability CVE-2026-39364 affects version 8.0.8-tuxcare.1 of vite."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-53571 is fixed in version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-53571"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/vite@8.0.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:npm/vite@8.0.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-53632 is fixed in version 8.0.8-tuxcare.1 of vite.",
      "vulnerability": {
        "name": "CVE-2026-53632"
      }
    }
  ]
}