create-vite vulnerabilities (TuxCare)

3 vulnerabilities.

• create-vite TuxCare launch-editor vulnerable to command injection via the crafted request on Windows CVE-2024-52011 Public exploitFix available 7.5 HighJune 1, 2026
• create-vite TuxCare vite allows server.fs.deny bypass via backslash on Windows CVE-2025-62522 Fix available 6.0 MediumOctober 20, 2025
• create-vite TuxCare TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option CVE-2024-38356 Fix available 6.1 MediumMay 28, 2021