Skip to content

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7888

Merged
advisory-database[bot] merged 1 commit into
koteswar-k/advisory-improvement-7888from
koteswar-k-GHSA-5xrq-8626-4rwp
Jun 8, 2026
Merged

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7888
advisory-database[bot] merged 1 commit into
koteswar-k/advisory-improvement-7888from
koteswar-k-GHSA-5xrq-8626-4rwp

Commits

Commits on Jun 4, 2026