CVE-2026-112946 Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

[
  {
    "vendor": "vitejs",
    "product": "vite",
    "versions": [
      {
        "version": ">= 8.3.0, < 8.3.3",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0, < 8.2.4",
        "status": "affected"
      },
      {
        "version": ">= 8.0.0, < 8.1.6",
        "status": "affected"
      },
      {
        "version": ">= 7.0.0, < 7.3.7",
        "status": "affected"
      },
      {
        "version": "< 6.4.4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "vitejs",
    "product": "vite-plus",
    "versions": [
      {
        "version": "< 1.1.0",
        "status": "affected"
      }
    ]
  }
]