CVE-2026-39365
Path traversal in Vitejs
CVSS score
5.3
EPSS probability
%1.0
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Vite Dev Server - Path Traversal in Optimized Deps .map Handling
Makefile Go / Python
https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9
Makefile Go / Python
Similar Vulnerabilities
8.2
CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
Patch status unknown Public Exploits:1EPSS %3
8.2
CVE-2026-39364Vite has a `server.fs.deny` bypass with queries
Patch status unknown Public Exploits:1EPSS %2
7.5
CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windows
Patch status unknownEPSS %1
5.3
CVE-2025-58752Information exposure in Vitejs
Patch verified Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-39365"