Skip to content

fix: avoid path traversal with optimize deps sourcemap handler (v5 backport)#22229

Closed
mhassan1 wants to merge 1 commit into
vitejs:v5from
mhassan1:v5-backport-cve-2026-39365
Closed

fix: avoid path traversal with optimize deps sourcemap handler (v5 backport)#22229
mhassan1 wants to merge 1 commit into
vitejs:v5from
mhassan1:v5-backport-cve-2026-39365

Conversation

@mhassan1
Copy link
Copy Markdown

This PR backports #22161 to the v5 branch to fix GHSA-4w7w-66w2-5vf9.

@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 14, 2026

Deploy Preview for vite-docs-v5 ready!

Name Link
🔨 Latest commit 9a501f2
🔍 Latest deploy log https://app.netlify.com/projects/vite-docs-v5/deploys/69dda2aa4dffe3000824a826
😎 Deploy Preview https://deploy-preview-22229--vite-docs-v5.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@bluwy
Copy link
Copy Markdown
Member

bluwy commented Apr 15, 2026

We no longer do security patches for Vite 5: https://vite.dev/releases#supported-versions

@bluwy bluwy closed this Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants