privilegedescalation/headlamp-sealed-secrets-plugin
12
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases 27 Wiki Activity

fix: patch Vite arbitrary file read vulnerability (GHSA-p9ff-h696-f583) #51

Merged
privilegedescalation-engineer[bot] merged 1 commits from gandalf/fix-vite-arbitrary-file-read-vulnerability into main 2026-05-03 17:44:05 +00:00
Conversation 3 Commits 1 Files Changed 2
+1088 -673

1 Commits

Author SHA1 Message Date
Gandalf the Greybeard 78a69fe9b4 fix: update vite to >=6.4.2 to patch arbitrary file read vulnerability 
Vite versions >=6.0.0 <=6.4.1 are vulnerable to arbitrary file read via
the Vite Dev Server WebSocket (server.fs.deny bypass with queries).

CVE: GHSA-p9ff-h696-f583

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-04-23 03:41:00 +00:00