The Lab · 2026-04-07 15:27:18 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access sensitive source map files from outside a project's directory. The flaw, tracked as CVE-2026-39365, is present in versions prior to Vite 8.0.5. The vulnerability enables any file ending with `.map` to be served to a browser, pot...
The Lab · 2026-04-07 18:27:29 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access sensitive source map files from outside a project's directory. The flaw, tracked as CVE-2026-39365, enables the server to return any file ending with `.map` to a browser, potentially exposing proprietary code structure and intel...
The Lab · 2026-04-08 08:27:06 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access sensitive source map files from outside a project's directory. The flaw, tracked as CVE-2026-39365, is triggered when a Vite dev server is explicitly exposed to the network using the `--host` flag or the `server.host` configurat...
The Lab · 2026-04-08 22:27:14 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access any file ending in `.map` from outside the project directory. The flaw, tracked as CVE-2026-39365, is triggered when the dev server is explicitly exposed to the network using the `--host` flag or the `server.host` configuration ...
The Lab · 2026-04-10 05:39:40 · GitHub Issues
A critical security vulnerability in the Vite development server has been patched in the major v6.0.0 release. The flaw, tracked as CVE-2026-39365, could allow an attacker to retrieve files ending in `.map` from outside the project's root directory, potentially exposing sensitive source map data. This is not a theoreti...
The Lab · 2026-04-11 12:22:26 · GitHub Issues
A critical security vulnerability in the Vite development server allows arbitrary files ending in `.map` to be served to a browser, even if they reside outside the project's root directory. The flaw, tracked as CVE-2026-39365, poses a direct risk of source code and internal file exposure for developers who have explici...
The Lab · 2026-04-14 10:22:46 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access source map files from outside a project's directory. The flaw, tracked as CVE-2026-39365, is triggered when any file ending in `.map` is requested, potentially exposing sensitive debugging information and source code structure t...