CVE-2025-59427
1 advisory.
npm/@cloudflare/vite-plugin CVE-2025-59427: medium
Cloudflare Vite plugin exposes secrets over the built-in dev server
Action: Upgrade @cloudflare/vite-plugin to 1.6.0 or later.
npm i @cloudflare/vite-plugin@1.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: GHSA-4pfg-2mw5-f8jx
- https://github.com/cloudflare/workers-sdk/security/advisories/GHSA-4pfg-2mw5-f8jx
- https://nvd.nist.gov/vuln/detail/CVE-2025-59427
- https://github.com/cloudflare/workers-sdk/commit/0e500720bf70016fa4ea21fc8959c4bd764ebc38
- https://hackerone.com/reports/3117837
- https://github.com/cloudflare/workers-sdk
- https://github.com/cloudflare/workers-sdk/discussions/3455#discussioncomment-6165773
CVE-2025-59427 · published · modified · JSON