CVE-2025-57753
1 advisory.
npm/vite-plugin-static-copy CVE-2025-57753: medium, EPSS 0.42%
vite-plugin-static-copy files not included in `src` are possible to access with a crafted request
Action: Upgrade vite-plugin-static-copy to 2.3.2 or later.
npm i vite-plugin-static-copy@3.1.2npm i vite-plugin-static-copy@2.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.2 | - |
| 0.4.3 | 2.3.2 | - |
Fixed versions
| 3.1.2 | 2.3.2 |
Sources
- osv: GHSA-pp7p-q8fx-2968
- https://github.com/sapphi-red/vite-plugin-static-copy/security/advisories/GHSA-pp7p-q8fx-2968
- https://nvd.nist.gov/vuln/detail/CVE-2025-57753
- https://github.com/sapphi-red/vite-plugin-static-copy/commit/0bc6b49ed72b46eecfc9682045f4b46a19694969
- https://github.com/sapphi-red/vite-plugin-static-copy/commit/4627afb8582083eab733881d3d974e1c1f23997d
- https://github.com/sapphi-red/vite-plugin-static-copy
- https://github.com/sapphi-red/vite-plugin-static-copy/releases/tag/vite-plugin-static-copy%402.3.2
- https://github.com/sapphi-red/vite-plugin-static-copy/releases/tag/vite-plugin-static-copy%403.1.2
CVE-2025-57753 · published · modified · JSON