Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

vite

npm

Native-ESM powered web dev build tool

View on github.com · View on npmjs.org

Security Advisories for vite in npm

Moderate
2 months ago

launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows GSA_kwCzR0hTQS12NndoLTk2ZzktNnd4M84ABYrP

npm vite-plus, vite, launch-editor
High
2 months ago

vite: `server.fs.deny` bypass on Windows alternate paths GSA_kwCzR0hTQS1meDJoLXBmNmoteGNmZs4ABYrO

npm vite-plus, vite
Moderate
4 months ago

Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling GSA_kwCzR0hTQS00dzd3LTY2dzItNXZmOc4ABUyr

npm vite
High
4 months ago

Vite: `server.fs.deny` bypassed with queries GSA_kwCzR0hTQS12MndqLXEzOXEtNTY2cs4ABUyq

npm vite
High
4 months ago

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket GSA_kwCzR0hTQS1wOWZmLWg2OTYtZjU4M84ABUyp

npm vite
Moderate
10 months ago

vite allows server.fs.deny bypass via backslash on Windows GSA_kwCzR0hTQS05M200LTY2MzQtNzRxN84ABNjr

npm vite
Low
11 months ago

Vite middleware may serve files starting with the same name with the public directory GSA_kwCzR0hTQS1nNGpxLWgydzktOTk3Y84ABL5N

npm vite
Low
11 months ago

Vite's `server.fs` settings were not applied to HTML files GSA_kwCzR0hTQS1qcWZ3LXZxMjQtdjljM84ABL5M

npm vite
Moderate
over 1 year ago

Vite's server.fs.deny bypassed with /. for files under project root GSA_kwCzR0hTQS04NTl3LTU5NDUtcjV2M84ABHSm

npm vite
Moderate
over 1 year ago

Vite has an `server.fs.deny` bypass with an invalid `request-target` GSA_kwCzR0hTQS0zNTZ3LTYzdjUtOHdmNM4ABGt0

npm vite
Moderate
over 1 year ago

Vite allows server.fs.deny to be bypassed with .svg or relative paths GSA_kwCzR0hTQS14Y2o2LXBxNmctcWo0eM4ABGau

npm vite
Moderate
over 1 year ago

Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query GSA_kwCzR0hTQS00cjRtLXF3NTctY2hyOM4ABGJV

npm vite
Moderate
over 1 year ago

Vite bypasses server.fs.deny when using ?raw?? GSA_kwCzR0hTQS14NTc0LW04MjMtNHg3d84ABF5T

npm vite
Moderate
over 1 year ago

Websites were able to send any requests to the development server and read the response in vite GSA_kwCzR0hTQS12ZzZ4LXJjZ2ctcmp4Ns4ABDou

npm vite
Moderate
almost 2 years ago

Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS GSA_kwCzR0hTQS02NHZyLWc0NTItcXZwM84AA_m5

npm vite
Moderate
almost 2 years ago

Vite's `server.fs.deny` is bypassed when using `?import&raw` GSA_kwCzR0hTQS05Y3d4LTI4ODMtNHdmeM4AA_m4

npm vite
Moderate
over 2 years ago

Vite's `server.fs.deny` did not deny requests for patterns with directories. GSA_kwCzR0hTQS04amh3LTI4OWgtamgyZ84AA6l1

npm vite
High
over 2 years ago

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem GSA_kwCzR0hTQS1jMjR2LThyZmMtdzh2d84AA4lu

npm vite
Moderate
over 2 years ago

Vite XSS vulnerability in `server.transformIndexHtml` via URL payload GSA_kwCzR0hTQS05MnIzLW0ybWctcGo5N84AA3lD

npm vite
High
about 3 years ago

Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) GSA_kwCzR0hTQS0zNTNmLTV4ZjQtcXc2N84AAzpR

npm vite
High
almost 4 years ago

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service GSA_kwCzR0hTQS1tdjQ4LWhjdmgtOGpqOM4AAuGt

npm vite

Filter by Severity

Moderate 13 High 6 Low 2