CVE-2026-41211 | voidzero-dev vite-plus up to 0.1.16 downloadPackageManager path traversal (GHSA-33r3-4whc-44c2)

A vulnerability was found in voidzero-dev vite-plus up to 0.1.16. It has been declared as critical. Affected by this vulnerability is the function downloadPackageManager. The manipulation results in path traversal.

This vulnerability is identified as CVE-2026-41211. The attack is only possible with local access. There is not any exploit available.

It is recommended to upgrade the affected component.