v2.1.9
·
252 commits
to main
since this release
c9e59a0
This commit was signed with the committer’s verified signature.
sheremet-va
Vladimir
This release includes security patches for:
- Browser mode serves arbitrary files | CVE-2025-24963
- Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964
🐞 Bug Fixes
- backport #7317 to v2 - by @hi-ogawa in #7318
- (backport #7340 to v2) restrict served files from
/__screenshot-error- by @hi-ogawa in #7343
View changes on GitHub
Contributors
hi-ogawa