Vite: Cross origin script execution through Vite custom middleware

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-112945 · Microsoft / collected KEV context

EUVD-2026-105125

GHSA-9jrq-w75r-8gcw

cve-program · CVE-2026-112945

• https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw
• https://github.com/vitejs/vite/pull/23653
• https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17

euvd · EUVD-2026-105125

• https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw
• https://github.com/vitejs/vite/pull/23653
• https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17

nvd · CVE-2026-112945

• https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17
• https://github.com/vitejs/vite/pull/23653
• https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw

osv · GHSA-9jrq-w75r-8gcw

• https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw
• https://nvd.nist.gov/vuln/detail/CVE-2026-112945
• https://github.com/vitejs/vite/pull/23653
• https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17
• https://github.com/vitejs/vite

No related operational record is retained in the current change model.