@vitest Browser vulnerabilities

• @vitest browser, ui, vitest-dev vitest +1 more +3 more Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file CVE-2026-112948 Fix available 6.5 MediumOctober 20, 2026