Skip to content

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7883

Open
joevin-slq-docto wants to merge 1 commit into
joevin-slq-docto/advisory-improvement-7883from
joevin-slq-docto-GHSA-5xrq-8626-4rwp
Open

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7883
joevin-slq-docto wants to merge 1 commit into
joevin-slq-docto/advisory-improvement-7883from
joevin-slq-docto-GHSA-5xrq-8626-4rwp

Commits

Commits on Jun 3, 2026