Improper Access Control

Vite is vulnerable to Improper Access Control. The vulnerability is due to the dev and preview servers serving any HTML files on the machine regardless of the server.fs settings, which allows an attacker to access unintended files when the Vite server is exposed to the network, potentially leadin...

EUVD-2017-3257

Malware in sbrugna...

EUVD-2020-29695

Malware in sbrugna...

EUVD-2009-2832

Malware in sbrugna...

EUVD-2018-0394

Malware in sbrugna...

EUVD-2006-2099

Malware in sbrugna...

EUVD-2007-5824

Malware in sbrugna...

EUVD-2019-6571

Malware in sbrugna...

EUVD-2004-2484

Malware in sbrugna...

EUVD-2008-0483

Malware in sbrugna...

EUVD-2009-2253

Malware in sbrugna...

EUVD-2017-18011

Malware in sbrugna...

EUVD-2024-1743

Malicious code in bioql PyPI...

EUVD-2024-30448

Malicious code in bioql PyPI...

EUVD-2021-30208

Malicious code in bioql PyPI...

EUVD-2024-38416

Malicious code in bioql PyPI...

EUVD-2024-32419

Malicious code in bioql PyPI...

EUVD-2024-33574

Malicious code in bioql PyPI...

GHSA-JQFW-VQ24-V9C3 Vite's `server.fs` settings were not applied to HTML files

Summary Any HTML files on the machine were served regardless of the server.fs settings. Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network using --host or server.host config option - appType: 'spa' default or appType: 'mpa' i...

PT-2025-36945

Name of the Vulnerable Software and Affected Versions: Halo versions prior to 2.20.13 Description: Halo versions prior to 2.20.13 allow bypassing file type detection, enabling the upload of malicious files, including .exe and .html files. Uploading .html files can trigger stored cross-site...