launch-editor vulnerabilities

2 known vulnerabilities in launch-editor from Vitejs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  launch-editor: Improper Neutralization of Special Elements used in a Command

  CVE-2026-112942Oct 20, 2026VitejsEPSS 1.69%

  launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-col

• 8.3 High severity

  launch-editor: Improper Neutralization of Special Elements used in a Command

  CVE-2024-52011Jun 1, 2026Vitejs

  launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a f