Threats tagged 'brew-vite-cve-2025-58751'

CVE-2025-58751 is a path traversal vulnerability in the vitejs vite development server affecting versions prior to 5.4.20. It allows an attacker to bypass server filesystem restrictions and access files outside the intended public directory when certain conditions are met, including exposing the dev server to the network, using the public directory feature, and having a symlink in the public directory. The vulnerability arises from improper path normalization and checking in the middleware serving public files, enabling traversal via crafted requests.