advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard
verified publisher icon github

[GHSA-9cwx-2883-4wfx] Vite's `server.fs.deny` is bypassed when using `?import&raw`

Open aprendis543 opened this issue 1 month ago • 1 comments

Updates

  • Affected products
  • CVSS v3

Comments Repor

aprendis543 avatar Dec 13 '25 03:12 aprendis543

Hi there @patak-dev! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

github avatar Dec 13 '25 03:12 github

Hi @aprendis543, We’re not able to accept these changes, as they are only slightly modified versions of the vulnerable examples already listed. We do appreciate you taking the time to suggest improvements.

helixplant avatar Dec 16 '25 16:12 helixplant