vite vulnerabilities (Root)
8 vulnerabilities.
-
viteRoot launch-editor: `fs.existsSync()` existence check can be bypassed on Windows 7.5 High -
viteRoot NTLMv2 hash disclosure via UNC path handling on Windows 5.5 Medium -
viteRoot Vite: `server.fs.deny` bypass on Windows alternate paths 8.2 High -
viteRoot Vite has a Path Traversal in Optimized Deps `.map` Handling 6.3 Medium -
viteRoot Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket 8.2 High -
viteRoot Vite's `server.fs` settings were not applied to HTML files 2.3 Low -
viteRoot Vite middleware may serve files starting with the same name with the public directory 2.3 Low -
viteRoot Vite bypasses server.fs.deny when using `?raw??` 5.3 Medium