Skip to content

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7892

Merged
advisory-database[bot] merged 1 commit into
SaronGrave/advisory-improvement-7892from
SaronGrave-GHSA-5xrq-8626-4rwp
Jun 8, 2026
Merged

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7892
advisory-database[bot] merged 1 commit into
SaronGrave/advisory-improvement-7892from
SaronGrave-GHSA-5xrq-8626-4rwp

Commits

Commits on Jun 4, 2026