Skip to content

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7894

Closed
jason-anthropic wants to merge 1 commit into
jason-anthropic/advisory-improvement-7894from
jason-anthropic-GHSA-5xrq-8626-4rwp
Closed

[GHSA-5xrq-8626-4rwp] When Vitest UI server is listening, arbitrary file can be read and executed#7894
jason-anthropic wants to merge 1 commit into
jason-anthropic/advisory-improvement-7894from
jason-anthropic-GHSA-5xrq-8626-4rwp

Commits

Commits on Jun 4, 2026