Vita3K vulnerabilities

CVEs whose affected-version data names the Vita3K package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112049Medium· 5.5

today

Vita3K before build 4187 Path Traversal via VPK Package Installation

Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via crafted .vpk archives. Attackers can embed '..' segments or a…

▾ SunlitVita3K · Vita3Kvia CVEORG