Cross-site Scripting (XSS)

Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getHtmlFilename function in packages/vite/src/node/server/middlewares/indexHtml.ts, where query strings are not stripped from the URL before the filename i...

Cross-site Scripting (XSS)

Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getHtmlFilename function in packages/vite/src/node/server/middlewares/indexHtml.ts, where query strings are not stripped from the URL before the filename ...