Repository navigation
Security: vitejs/launch-editor
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
`fs.existsSync()` existence check can be bypassed on WindowsGHSA-587h-7wmj-h5pm published
Oct 6, 2026 by sapphi-redHigh -
Editor CLI flag misinterpretation causing arbitrary command execution for some editorsGHSA-r825-w8mm-5pxw published
Oct 6, 2026 by sapphi-redModerate -
escapeCmdArgs() omits % escaping on WindowsGHSA-698v-4r3x-3vcv published
Oct 6, 2026 by sapphi-redModerate -
NTLMv2 hash disclosure via UNC path handling on WindowsGHSA-v6wh-96g9-6wx3 published
Jun 1, 2026 by sapphi-redModerate -
Command injection via the crafted request on WindowsGHSA-c27g-q93r-2cwf published
Jun 1, 2026 by sapphi-redHigh