Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling

🗓️ 06 Apr 2026 18:03:46Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 235 Views

Vite dev server exposes path traversal via optimized dependencies map files when networked.

Reporter	Title	Published	Views	Family All 32
ATTACKERKB	CVE-2026-39365	7 Apr 202619:13	–	attackerkb
Chainguard	CVE-2026-39365 vulnerabilities	10 Apr 202602:14	–	cgr
Circl	CVE-2026-39365	6 Apr 202612:13	–	circl
CNNVD	Vite 路径遍历漏洞	7 Apr 202600:00	–	cnnvd
CVE	CVE-2026-39365	7 Apr 202619:13	–	cve
Cvelist	CVE-2026-39365 Vite has a Path Traversal in Optimized Deps `.map` Handling	7 Apr 202619:13	–	cvelist
EUVD	EUVD-2026-19875	7 Apr 202619:13	–	euvd
Nuclei	Vite Dev Server - Path Traversal in Optimized Deps .map Handling	23 Jun 202605:08	–	nuclei
NVD	CVE-2026-39365	7 Apr 202620:16	–	nvd
OSV	CGA-V8CR-XQ93-34HX	9 Apr 202614:46	–	osv

Vulners

Node

vitejs viteRange≤6.4.1npm

vitejs viteRange7.0.0–7.3.1npm

vitejs viteRange8.0.0–8.0.4npm

Source	Link
github	www.github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9
github	www.github.com/vitejs/vite/pull/22161
github	www.github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694
github	www.github.com/vitejs/vite/releases/tag/v6.4.2
github	www.github.com/vitejs/vite/releases/tag/v7.3.2
github	www.github.com/vitejs/vite/releases/tag/v8.0.5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39365
github	www.github.com/advisories/GHSA-4w7w-66w2-5vf9

07 Apr 2026 22:16Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

CVSS 46.3

EPSS0.00914

SSVC