CVE-2024-45811 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45811 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

CVE-2024-45811 server.fs.deny bypassed when using ?import&raw in vite

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it...

@adhd/react-hooks (=2.2.1), @aklesky/vite-config (>=0.7.9 <=0.9.0) +252 more potentially affected by CVE-2024-45811 via vite (>=5.0.0 <=5.1.7)

vite NPM version =5.0.0, =0.7.9, =17.1.0, =1.0.25-beta.0, =0.5.0, =2.0.0-beta.0, =0.22.0, =1.0.1, =1.0.0, =1.0.0, =0.9.0, =1.0.0-alpha.13, =1.0.0-alpha.1, =1.0.0-alpha.1, =1.0.0-alpha.4 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

@angular/build (>=18.1.0 <=18.2.0-rc.0), @bebasebuild/basebuild (>=2.0.0-beta.3 <=3.0.0-alpha.1) +40 more potentially affected by CVE-2024-45811 via vite (>=5.3.0 <=5.3.5)

vite NPM version =5.3.0, =18.1.0, =2.0.0-beta.3, =0.44.0, =5.0.0-alpha.11, =1.0.1, =11.17.8, =0.0.1, =14.190.0, =0.0.1719809477737, =8.1.1, =0.0.1, =1.0.0, =1.0.2 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

1food-menu (=0.3.8), 2473-alex-ui (>=0.0.1 <=0.0.4-alpha.3) +4791 more potentially affected by CVE-2024-45811 via vite (>=5.4.0 <=5.4.5)

vite NPM version =5.4.0, =0.0.1, =0.0.1, =1.1.2, =0.1.1, =0.1.0, =5.0.0, =0.0.1-alpha.10, =0.0.4-alpha.5, =0.0.11, =0.0.5, =0.0.1, =1.0.0, =1.0.0, =1.1.1 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...

128981semzub (=1.0.1), 1food-menu (>=0.3.0 <=0.3.7) +3131 more potentially affected by CVE-2024-45811 via vite (>=4.0.0 <=4.5.3)

vite NPM version =4.0.0, =0.3.0, =1.0.0, =2.0.3, =0.0.1, =0.0.1, =0.0.7, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.3 and more Source cves: CVE-2024-45811 Source advisory: OSV:GHSA-9CWX-2883-4WFX...