The Lab · 2026-04-06 20:27:25 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access any file ending in `.map` on the host system, potentially exposing sensitive source code and internal project structure. The flaw, tracked as GHSA-4w7w-66w2-5vf9, is present in versions prior to Vite 8.0.5. This is not a theoret...
The Lab · 2026-04-06 21:27:12 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access sensitive source map files from outside a project's directory. The flaw, tracked as GHSA-4w7w-66w2-5vf9, specifically affects any file ending with `.map`, potentially exposing unminified source code and internal project structur...
The Lab · 2026-04-10 05:39:40 · GitHub Issues
A critical security vulnerability in the Vite development server has been patched in the major v6.0.0 release. The flaw, tracked as CVE-2026-39365, could allow an attacker to retrieve files ending in `.map` from outside the project's root directory, potentially exposing sensitive source map data. This is not a theoreti...
The Lab · 2026-04-14 10:22:46 · GitHub Issues
A critical security vulnerability in the Vite development server allows attackers to access source map files from outside a project's directory. The flaw, tracked as CVE-2026-39365, is triggered when any file ending in `.map` is requested, potentially exposing sensitive debugging information and source code structure t...