Aller au contenu
en Se connecter
2.3 Faible

CVE-2025-58751 Vite is a frontend tooling framework for JavaScript

Description

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or `server.host` config option), use the public directory feature (enabled by default), and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
vite 7.1 7.1.0 → < 7.1.5 7.1.5
vite 7.0 7.0.0 → < 7.0.7 7.0.7
vite 6.0 6.0.0 → < 6.3.6 6.3.6
vite 5.4 premières → < 5.4.20 5.4.20

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de vite

Les 28 CVE de vite →
CVE-2026-118662 Vite is a frontend tooling framework for JavaScript 6.9 Moyenne CVE-2026-112947 Vite is a frontend tooling framework for JavaScript 6.3 Moyenne CVE-2026-112946 Vite is a frontend tooling framework for JavaScript 6.3 Moyenne CVE-2026-112945 Vite is a frontend tooling framework for JavaScript 2.1 Faible
Suivre cette CVE