Expand intel coverage and refresh monitoring

这个提交包含在:
hao
2026-03-18 14:18:09 -07:00
父节点 87008d1bd5
当前提交 00d828d090
修改 3658 个文件,包含 124245 行新增13073 行删除

查看文件

@@ -12,7 +12,7 @@
- 已实证(synthetic): `0`
- 阻塞数: `0`
- 待人工/缺浏览器证据: `30`
- 最近渲染时间: `2026-03-18T18:34:34+00:00`
- 最近渲染时间: `2026-03-18T21:16:45+00:00`
## 目标约束
@@ -48,6 +48,8 @@
| Vite XSS vulnerability in `server.transformIndexHtml` via URL payload | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2023-12-06T00:11:36.913866Z` | [link](/Users/x/websafe/07-framework-security/frameworks/vite/cases/vite-cve-2023-49293.md) |
| Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//) | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2024-08-09T19:14:57Z` | [link](/Users/x/websafe/07-framework-security/frameworks/vite/cases/vite-cve-2023-34092.md) |
| Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2024-09-23T19:18:33Z` | [link](/Users/x/websafe/07-framework-security/frameworks/vite/cases/vite-cve-2022-35204.md) |
| Pull requests
191 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Any websites were able to send any requests to the development server and read the response | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| DOM Clobbering gadget found in vite bundled scripts that leads to XSS | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| `server.fs.deny` bypassed for `inline` and `raw` with `?import` query | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
@@ -56,24 +58,23 @@
| `server.fs.deny` bypassed with `\` on Windows | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| vitejs | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Sign up | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Star
79.1k | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Files starting with the same name with the public directory were served | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| `server.fs.deny` bypassed with `/.` for files under project `root` | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Issues
478 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| vite | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Pull requests
188 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| `server.fs.deny` bypassed with `.svg` or relative paths | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Policy | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Discussions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| `server.fs.deny` bypassed with an invalid `request-target` | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Next | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Sign in | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| `server.fs` settings was not applied to HTML files | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Notifications | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Report a vulnerability | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Insights | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Projects | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| 2 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| server.fs.deny bypassed when using `?raw??` | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Skip to content | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
| Actions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |