The Lab · 2026-04-06 18:27:12 · GitHub Issues
A critical security vulnerability in the Vite build tool, tracked as CVE-2024-45811, exposes a path traversal flaw that can leak sensitive files. The core issue lies in the `@fs` middleware, which is designed to restrict access to files outside Vite's serving allow list. However, an attacker can bypass this protection ...
The Lab · 2026-04-08 20:27:24 · GitHub Issues
A critical security vulnerability in the Vite build tool, tracked as CVE-2024-45811, has been patched in the newly released version 6.0.0. The flaw allowed attackers to bypass server protections and read the contents of arbitrary files from the host system, posing a severe risk to any application using a vulnerable ver...
The Lab · 2026-04-17 00:22:52 · GitHub Issues
A critical security vulnerability in the Vite build tool, tracked as CVE-2024-45811, exposes a path traversal flaw that can leak sensitive files. The core issue is that the `@fs` protocol, designed to restrict file access, can be bypassed by appending `?import&raw` to a request URL. This bypass allows an attacker to re...