Security Bulletin: A vite-7.1.5.tgz vulnerability found by Scanner affects IBM Rational Functional Tester / DevOps Test UI

Summary There is a vulnerability in vite-7.1.5.tgz used by Rational Functional Tester RFT / DevOps Test UI Test UI. RFT/Test UI has addressed the applicable CVE Vulnerability Details CVEID:CVE-2025-62522 DESCRIPTION: Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.8), @angular/build (>=20.2.0-next.3, <=21.0.0-next.8) +73 more potentially affected by CVE-2025-62522 via vite (>=7.1.0, <=7.1.10)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =1.0.0-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =0.11.0-alpha.5, =1.0.0-alpha.2 and more Source cves: CVE-2025-62522 Source advisory: SNYK:JS-VITE-13644406...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +203 more potentially affected by CVE-2025-62522 via vite (>=6.0.0, <=6.4.0)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-62522 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-62522 Source advisory:...

CVE-2025-62522 vite allows server.fs.deny bypass via backslash on Windows

Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by server.fs.deny were sent if the URL ended...

CVE-2025-62522 vite allows server.fs.deny bypass via backslash on Windows

Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by server.fs.deny were sent if the URL ended...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +203 more potentially affected by CVE-2025-62522 via vite (>=6.0.0, <=6.4.0)

vite NPM version =6.0.0, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.55.0, =0.21.2-4.1, =0.21.23 and more Source...

128981semzub (1.0.1), 1food-menu (>=0.0.1, <=0.3.7) +5161 more potentially affected by CVE-2025-62522 via vite (>=2.9.18, <=5.4.20)

vite NPM version =2.9.18, =0.0.1, =1.0.0, =1.0.0-canary.1, =0.0.1, =0.0.1, =0.0.7, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =4.0.84 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

@angular-devkit/build-angular (>=20.2.0-next.3, <=21.0.0-next.8), @angular/build (>=20.2.0-next.3, <=21.0.0-next.8) +73 more potentially affected by CVE-2025-62522 via vite (>=7.1.0, <=7.1.10)

vite NPM version =7.1.0, =20.2.0-next.3, =20.2.0-next.3, =2.1.2-alpha.0, =1.0.0-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =0.11.0-alpha.5, =1.0.0-alpha.2 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...

@angular-devkit/build-angular (>=20.1.0-next.3, <=20.2.0-next.2), @angular/build (>=20.1.0-next.3, <=20.2.0-next.2) +60 more potentially affected by CVE-2025-62522 via vite (>=7.0.0, <=7.0.6)

vite NPM version =7.0.0, =20.1.0-next.3, =20.1.0-next.3, =0.0.4, =0.2.9, =1.0.0, =1.190.0, =0.1.0, =19.3.2-snapshot-1752652198707, =19.3.2-snapshot-1752652198707, =0.0.1750946288791, =0.0.2, =0.3.0 and more Source cves: CVE-2025-62522 Source advisory: OSV:GHSA-93M4-6634-74Q7...