CVE-2025-58752 vulnerabilities

Vulnerabilities for packages: langfuse-fips, vitess, langfuse...

CVE-2025-58752 Vite's `server.fs` settings were not applied to HTML files

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served regardless of the server.fs settings. Only apps that explicitly expose the Vite dev server to the network using --host or server.host config option and...

CVE-2025-58752

creationtimestamp| type| source ---|---|--- 2025-09-08 07:03:19+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3 2026-03-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-03...