Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/07/21 7:36 p.m.•54 views

@vitest/browser: Browser Mode provider commands bypass the file-access permission gate

Summary Browser Mode exposes a set of built-in "commands" that run on the Node.js side of the test runner and can touch the local filesystem taking screenshots, managing Playwright traces, uploading files for , comparing screenshots. Several of these commands accept a file path from the browser a...

9.4CVSS6.2AI score0.0079EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder