Vulnerabilities
Last updated 25 minutes ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
launch-editor: `fs.existsSync()` existence check can be bypassed on Windows | High Risk 8.0 | 2 hours ago | 2 hours ago |
|
|
launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors | Medium Risk 6.0 | 2 hours ago | 2 hours ago |
|
|
launch-editor: escapeCmdArgs() omits % escaping on Windows | Medium Risk 6.0 | 3 hours ago | 3 hours ago |
|
|
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows | Medium Risk 6.0 | 4 months ago | 1 month ago |
|
|
vite: `server.fs.deny` bypass on Windows alternate paths | High Risk 7.5 | 4 months ago | 1 month ago |
|
|
Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE | Critical 9.8 | 4 months ago | 2 months ago |
|
|
Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME | Critical 10.0 | 6 months ago | 5 months ago |
Page 1