Skip to content

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7883

Merged
advisory-database[bot] merged 1 commit into
joevin-slq-docto/advisory-improvement-7883from
joevin-slq-docto-GHSA-5xrq-8626-4rwp
Jun 8, 2026
Merged

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7883
advisory-database[bot] merged 1 commit into
joevin-slq-docto/advisory-improvement-7883from
joevin-slq-docto-GHSA-5xrq-8626-4rwp

Commits

Commits on Jun 3, 2026