GHSA-RQ7H-C2JC-7F22 Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

Summary The content of files outside server.fs setting can be returned to the browser if the project imports a file path concatenated with the root. For example, if the project references /etc/hosts, the content of /etc/hosts was possible to be returned. The content of files outside the...

Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

Summary The content of files outside server.fs setting can be returned to the browser if the project imports a file path concatenated with the root. For example, if the project references /etc/hosts, the content of /etc/hosts was possible to be returned. The content of files outside the...