4 matches found
Incorrect Behavior Order: Validate Before Canonicalize
Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize via isServerAccessDeniedForTransform in packages/vite/src/node/server/middlewares/transform.ts, where the server.fs access control...
Directory Traversal
Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Directory Traversal via the isServerAccessDeniedForTransform function in packages/vite/src/node/server/middlewares/transform.ts, which fails to check the ?vite-wasm-instance query paramet...
Directory Traversal
Overview org.webjars.npm:vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Directory Traversal via the isServerAccessDeniedForTransform function in packages/vite/src/node/server/middlewares/transform.ts, which fails to check the ?vite-wasm-instanc...
Directory Traversal
Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Directory Traversal via the isServerAccessDeniedForTransform function in packages/vite/src/node/server/middlewares/transform.ts, which fails to check the ?vite-wasm-instance query paramete...