privilegedescalation/headlamp-kube-vip-plugin
12
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 8 Wiki Activity

fix: patch Vite arbitrary file read vulnerability (GHSA-p9ff-h696-f583) #39

Merged
privilegedescalation-engineer[bot] merged 1 commits from gandalf/fix-vite-arbitrary-file-read-vulnerability into main 2026-05-03 17:44:02 +00:00
Conversation 2 Commits 1 Files Changed 2
+845 -761

1 Commits

Author SHA1 Message Date
Gandalf the Greybeard f70f6b53ec fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability 
Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via
the Vite Dev Server WebSocket (server.fs.deny bypass with queries).

CVE: GHSA-p9ff-h696-f583

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-04-23 03:41:12 +00:00