https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 02:42:39 +0000 https://cve.radiocsirt.org/vuln/cve-2026-39364 <p><strong>Affected:</strong> vitejs vite, vitejs vite-plus, Red Hat Ansible Automation Platform 2.6, Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform 2, Red Hat Build of Keycloak, Red Hat Build of Podman Desktop, Red Hat Build of Podman Desktop - Tech Preview, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack and 1 more</p> <p>Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite dev server, files that should be blocked by server.fs.deny (e.g., .env, *.crt) can be retrieved with HTTP 200 responses when query parameters such as ?raw, ?import&amp;raw, or ?import&amp;url&amp;inline are appended. This vulnerability is fixed in 7.3.2 and 8.0.5.</p> <p><strong>Affected:</strong> vitejs vite, vitejs vite-plus, Red Hat Ansible Automation Platform 2.6, Red Hat Advanced Cluster Security 4, Red Hat Ansible Automation Platform 2, Red Hat Build of Keycloak, Red Hat Build of Podman Desktop, Red Hat Build of Podman Desktop - Tech Preview, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack and 1 more</p> <p>Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite dev server, files that should be blocked by server.fs.deny (e.g., .env, *.crt) can be retrieved with HTTP 200 responses when query parameters such as ?raw, ?import&amp;raw, or ?import&amp;url&amp;inline are appended. This vulnerability is fixed in 7.3.2 and 8.0.5.</p> https://cve.radiocsirt.org/vuln/cve-2026-39364