Skip to content

Catalog Stack Sift Security Status About Feed

6.4.4

6 Oct 202618 days agoOriginal notes

This release closes 2 security advisories

lowCross origin script execution through Vite custom middlewareCVE-2026-112945
mediumFiles outside `server.fs.allow` could be served when project paths match system paths on non-Windows machineCVE-2026-112946

Please refer to CHANGELOG.md for details.

What happened next

Vite 6.4.4 was superseded 15 days later by 6.4.5.

The one that followed, on the 6.4.x line:

6.4.5Closes 1 advisory21 Oct 2026

Previous: 6.4.3 Next: 6.4.5

Traceary. Change, on the record.61 products, 5,179 releases

Catalog Changelog Status How the data is collected RSS

Release notes belong to their authors and are shown here under the terms each project publishes them with. Every entry links back to the original, and a publisher can have theirs taken down.

Terms of use Privacy Copyright and removal Imprint