Live data from Hacker News

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

Post reply on HN

Print view View original

1–3 of 3 posts

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

#1

Post by lukax » Tue, Apr 07, 2026, 6:16 AM UTC

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
github.com

Re: Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

#2

Post by lukax » Tue, Apr 07, 2026, 6:16 AM UTC

Combine that with CVE-2025-24010 and any website was able to read any file on developers' computers.

https://github.com/advisories/GHSA-vg6x-rcgg-rjx6

Re: Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

#3

Post by ju571nk3n » Tue, Apr 07, 2026, 6:36 AM UTC

[dead]

Post reply on HN