{"revision":"de6d2b02c734422cb7ac04de49235a1d","evidence":{"cve":"CVE-2025-31125","kev":{"cve":"CVE-2025-31125","product":"Vitejs","name":"Vite Vitejs Improper Access Control Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","knownRansomwareUse":false,"shortDescription":"Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.","vendor":"Vite","isMicrosoft":false,"products":[],"advisoryUrl":"https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31125","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-31125"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"43c1d42a7a69873c1b16e71e"}}