Post

AriPerkkio
@ariperkkio.dev

Huge thanks to @sapphi.red for helping the @vitest.dev team with these findings. Perfect collaboration between projects. 🤝

Vitest@vitest.dev

We've released patches for a critical security vulnerability. We strongly encourage projects to upgrade to versions 1.6.1, 2.1.9, or 3.0.5 as soon as possible.

github.comRemote Code Execution when accessing a malicious website while Vitest API server is listening### Summary Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks. ### Details When [`api` o...

4 reposts21 likes