CVE-2026-112946

The Vite frontend tooling framework contains a vulnerability where files outside server.fs.allow could be served on non-Windows development servers accessible over a network. The root cause is that import analysis may record a root-relative browser URL in safeModulePaths instead of a cleaned reso...