Threats Tagged 'brew-vite-cve-2025-32395'
View all threats tagged with 'brew-vite-cve-2025-32395'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-vite-cve-2025-32395'
Click on any threat for detailed analysis and mitigation recommendations
0 Vite versions from 2.5.1 up to but not including 6.2.6 have a vulnerability where the dev server's file system access restrictions can be bypassed using an invalid HTTP request-target containing a '#' character. This allows an attacker to retrieve arbitrary files if the dev server is explicitly exposed to the network and running on Node or Bun runtimes. The issue arises because Vite assumes the request URL will not contain '#', but Node and Bun do not reject such requests internally, enabling the bypass. Deno runtime is not affected due to different URL handling. Join the discussion | GCVE Database | 08/13/2026, 17:48:54 UTC Added: 09/29/2026, 04:42:02 UTC |
Showing 1 to 1 of 1 result