vitejs/vite Security Advisories | GitStock

medium2023-12-05

Vite XSS vulnerability in `server.transformIndexHtml` via URL payload

GHSA-92r3-m2mg-pj97 · CVE-2023-49293

high2023-06-06

Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)

GHSA-353f-5xf4-qw67 · CVE-2023-34092

high2022-08-19

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

GHSA-mv48-hcvh-8jj8 · CVE-2022-35204