Cross-site Scripting (XSS)

Vitest is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of attacker-controlled URLs inserted into generated module source by createManualModuleSource, which allows an unauthenticated attacker to register a malicious mock through a WebSocket connection a...