> CVE-2025-57753

« BACK_TO_HOME
PUBLISHED
2025-08-21 16:15
MODIFIED
2025-08-22 18:09
EPSS (Prob. Exploit)
0.42%
Top 63.2%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

vite-plugin-static-copy is rollup-plugin-copy for Vite with dev server support. Files not included in src are accessible with a crafted request. The vulnerability is fixed in 2.3.2 and 3.1.2.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-pp7p-q8fx-2968 MODERATE

vite-plugin-static-copy files not included in `src` are possible to access with a crafted request

AFFECTED PACKAGES:
NPM / vite-plugin-static-copy
>= 0.4.3, <= 2.3.1
Fixed in: 2.3.2
NPM / vite-plugin-static-copy
>= 3.0.0, <= 3.1.1
Fixed in: 3.1.2

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

vite-plugin-static-copy files not included in `src` are accessible with a crafted request

AFFECTED PACKAGES:
Unknown / Unknown
37 versions affected
ALIASES:
GHSA-pp7p-q8fx-2968

> HISTORIQUE DES MODIFICATIONS

Première apparition
21/08/2025 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:07
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:08
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:08
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME