The Lab · 2026-04-06 12:27:15 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to bypass file access restrictions on Windows systems. The flaw, tracked as CVE-2025-62522, enables the retrieval of files explicitly denied by the `server.fs.deny` configuration if a malicious URL ends with a backslash (`\`). This bypass...
The Lab · 2026-04-10 06:39:45 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to bypass file access restrictions on Windows systems. The flaw, tracked as CVE-2025-62522, enables the retrieval of files explicitly denied by the `server.fs.deny` configuration if a malicious URL ends with a backslash (`\`). This bypass...
The Lab · 2026-04-10 06:39:46 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to bypass file access restrictions on Windows systems. The flaw, tracked as CVE-2025-62522, enables the retrieval of files explicitly denied by the `server.fs.deny` configuration if a malicious URL ends with a backslash (`\`). This bypass...