@rootio/vite vulnerabilities (Root)
8 vulnerabilities.
-
@rootio/viteRoot launch-editor: `fs.existsSync()` existence check can be bypassed on Windows 7.5 High -
@rootio/viteRoot NTLMv2 hash disclosure via UNC path handling on Windows 5.5 Medium -
@rootio/viteRoot Vite: `server.fs.deny` bypass on Windows alternate paths 8.2 High -
@rootio/viteRoot Vite has a Path Traversal in Optimized Deps `.map` Handling 6.3 Medium -
@rootio/viteRoot Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket 8.2 High -
@rootio/viteRoot Vite's `server.fs` settings were not applied to HTML files 2.3 Low -
@rootio/viteRoot Vite middleware may serve files starting with the same name with the public directory 2.3 Low -
@rootio/viteRoot Vite bypasses server.fs.deny when using `?raw??` 5.3 Medium