Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

Vite

We maintain Vite, a fast and simple build tool for the web.
Collective - Host: opensource - https://opencollective.com/vite - Website: https://vitejs.dev - Code: https://github.com/vitejs/vite

Moderate

vite: GSA_kwCzR0hTQS04amh3LTI4OWgtamgyZ84AA6l1

Vite's `server.fs.deny` did not deny requests for patterns with directories.
Ecosystems: npm
Packages: vite
Source: github
Published: 6 months ago

High

vite: GSA_kwCzR0hTQS1jMjR2LThyZmMtdzh2d84AA4lu

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
Ecosystems: npm
Packages: vite
Source: github
Published: 8 months ago

Moderate

vite: GSA_kwCzR0hTQS05MnIzLW0ybWctcGo5N84AA3lD

Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Ecosystems: npm
Packages: vite
Source: github
Published: 10 months ago

High

vite: GSA_kwCzR0hTQS0zNTNmLTV4ZjQtcXc2N84AAzpR

Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Ecosystems: npm
Packages: vite
Source: github
Published: over 1 year ago

Moderate

vite: GSA_kwCzR0hTQS1tdjQ4LWhjdmgtOGpqOM4AAuGt

Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Ecosystems: npm
Packages: vite
Source: github
Published: about 2 years ago