@vitejs/plugin-legacy vulnerabilities (TuxCare)
7 vulnerabilities.
-
@vitejs/plugin-legacyTuxCare launch-editor vulnerable to command injection via the crafted request on Windows 7.5 High -
@vitejs/plugin-legacyTuxCare vite allows server.fs.deny bypass via backslash on Windows 6.0 Medium -
@vitejs/plugin-legacyTuxCare Vite's server.fs.deny bypassed with /. for files under project root 6.0 Medium -
@vitejs/plugin-legacyTuxCare Vite has an `server.fs.deny` bypass with an invalid `request-target` 6.0 Medium -
@vitejs/plugin-legacyTuxCare Vite allows server.fs.deny to be bypassed with .svg or relative paths 5.3 Medium -
@vitejs/plugin-legacyTuxCare Vite bypasses server.fs.deny when using `?raw??` 5.3 Medium -
@vitejs/plugin-legacyTuxCare TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option 6.1 Medium