npm/vite CVE-2024-52011: high 8.3, EPSS 0.51%
launch-editor vulnerable to command injection via the crafted request on Windows
Action: Upgrade vite to 5.4.9 or later.
npm i vite@5.4.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4.9 | - |
Fixed versions
| 5.4.9 |
Sources
- osv: GHSA-c27g-q93r-2cwf#npm/vite
- nvd: CVE-2024-52011
- https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf
- https://github.com/yyx990803/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf
- https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e
- https://github.com/vitejs/launch-editor
CVE-2024-52011 · published · modified · JSON