npm/vite CVE-2026-53632: medium, EPSS 0.41%
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
Action: Upgrade vite to 6.4.3 or later.
npm i vite@8.0.16npm i vite@7.3.5npm i vite@6.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.0.16 | - |
| 7.0.0 | 7.3.5 | - |
| 0 | 6.4.3 | - |
Fixed versions
| 8.0.16 | 7.3.5 | 6.4.3 |
Sources
- osv: GHSA-v6wh-96g9-6wx3#npm/vite
- https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3
- https://github.com/vitejs/launch-editor
CVE-2026-53632 · published · modified · JSON