{"ip":"67.213.121.153","total_events":67055,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"11 exploit-path hits","confidence":"high","network_type":"CDN","why":["11 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 11,614,151 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"11,614,151 bytes sent","bytes_sent":11614151,"session_seconds":27,"persistent":false}},"first_seen":"2026-08-29T01:23:33","last_seen":"2026-09-13T02:48:23","events_24h":0,"events_7d":0,"geo":{"country_code":"DE","country_name":"Germany","region":"Brandenburg","city":"Frankfurt (Oder)","lat":52.3484,"lon":14.5546,"asn":396356,"org":"Latitude.sh"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as396356","label":"Latitude.sh AS396356","category":"cdn","url":"https://www.peeringdb.com/asn/396356"},"cve_matches":[{"cve_id":"CVE-2025-31125","title":"Vite Development Server - Path Traversal","severity":"medium","actively_exploited":true,"match_field":"url_path","matched_pattern":"/@fs/etc/passwd?import&?inline=1.wasm?init"},{"cve_id":"CVE-2019-18922","title":"Allied Telesis AT-GS950/8 - Local File Inclusion","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../../etc/passwd"},{"cve_id":"CVE-2019-7315","title":"Genie Access WIP3BVAF IP Camera - Local File Inclusion","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../etc/passwd"},{"cve_id":"CVE-2023-39141","title":"Aria2 WebUI - Path traversal","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../etc/passwd"},{"cve_id":"CVE-2024-41628","title":"Cluster Control CMON API - Directory Traversal","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../../../../..//etc/passwd"},{"cve_id":"CVE-2025-30208","title":"Vite - Arbitrary File Read","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/etc/passwd?raw"},{"cve_id":"CVE-2025-31486","title":"Vite server.fs.deny Bypass - Local File Inclusion","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/etc/passwd?.svg?.wasm?init"}],"malware":[],"top_ports":[{"port":5173,"proto":"tcp","label":"","count":64006},{"port":3000,"proto":"tcp","label":"Web-alt","count":1038},{"port":5174,"proto":"tcp","label":"","count":897},{"port":80,"proto":"tcp","label":"HTTP","count":258},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":128},{"port":24678,"proto":"tcp","label":"","count":105},{"port":4200,"proto":"tcp","label":"","count":64},{"port":4321,"proto":"tcp","label":"","count":64},{"port":4173,"proto":"tcp","label":"","count":64},{"port":3036,"proto":"tcp","label":"","count":64},{"port":443,"proto":"tcp","label":"HTTPS","count":64},{"port":4000,"proto":"tcp","label":"","count":64},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":64},{"port":8000,"proto":"tcp","label":"HTTP-alt","count":64},{"port":5172,"proto":"tcp","label":"","count":36}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i1516h2_8daaf6152771_0d789d2519e1","t13i1311h2_f57a46bbacb6_f50d94e863eb","t13i1517h2_8daaf6152771_67686899877d","t13i1311h1_f57a46bbacb6_f50d94e863eb"],"tls_client_hello":"","tls_ja3":["60828da5b42313d165aae2938e651b72","a0de9fb7da32a5f46bfe3f1c876cb5df","b1a12954fa04cc2e3982a8a27125e685","1e38f93f7550194f7b72b3855f1e3c6b"]},"fingerprint_peers":{"t13i1516h2_8daaf6152771_0d789d2519e1":1,"t13i1311h2_f57a46bbacb6_f50d94e863eb":2261,"t13i1517h2_8daaf6152771_67686899877d":1,"t13i1311h1_f57a46bbacb6_f50d94e863eb":3},"user_agents":["curl/8.5.0","curl/8.0","vitesweep-browser/1","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36","CryptoHunter-Vite-2026/1.0","vitesweep/1"],"timeline":[{"date":"2026-08-29","count":50961},{"date":"2026-08-30","count":13146},{"date":"2026-09-01","count":512},{"date":"2026-09-02","count":834},{"date":"2026-09-08","count":6},{"date":"2026-09-10","count":1181},{"date":"2026-09-11","count":408},{"date":"2026-09-13","count":7}],"recent_events":[{"timestamp":"2026-09-13T02:48:23","port":5052,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5052\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353035320d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"f18cf6da-360b-4d54-a143-f07875c26333","seq":1,"duration_ms":102,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:48:23","port":5053,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5053\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353035330d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"6694c3f4-cef1-4afa-85b6-7c4f809374d4","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:48:23","port":3500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:3500\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333530300d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"0a988295-8ce2-4950-a087-3de6fcd65f28","seq":1,"duration_ms":101,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:48:23","port":5053,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5053\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353035330d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"51e66855-3023-47e6-91aa-4750a6a69bff","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:48:23","port":5052,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5052\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353035320d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"eba57c4b-e21f-4202-88c3-44109dfc442e","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:48:23","port":3500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:3500\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a333530300d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"7f8c575d-0b57-4550-8e6d-8e349bb77064","seq":1,"duration_ms":101,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-13T02:42:22","port":5053,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"host\":\"<HONEYPOT>:5053\",\"user-agent\":\"curl/8.0\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/eth/v1/node/version","summary":"","payload_hex":"474554202f6574682f76312f6e6f64652f76657273696f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353035330d0a557365722d4167656e743a206375726c2f382e300d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a0d0a","method":"GET","user_agent":"curl/8.0","ja3":"","session":"28586624-599a-4e45-a4a3-238cfb4e523d","seq":1,"duration_ms":100,"bytes_in":129,"bytes_out":79},{"timestamp":"2026-09-11T04:42:07","port":5174,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5174\",\"pragma\":\"no-cache\",\"referer\":\"https://<HONEYPOT>:5174/\",\"sec-ch-ua\":\"\\\"Google Chrome\\\";v=\\\"153\\\", \\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"153\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Linux\\\"\",\"sec-fetch-dest\":\"image\",\"sec-fetch-mode\":\"no-cors\",\"sec-fetch-site\":\"same-origin\",\"user-agent\":\"vitesweep-browser/1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>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<HONEYPOT>3a353137342f0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a0d0a","method":"GET","user_agent":"vitesweep-browser/1","ja3":"2e3766685db2ac8c71f0d5e6730b4332","session":"8b73e506-207d-4d1a-9c86-ab7c7d5affd0","seq":2,"duration_ms":352,"bytes_in":1160,"bytes_out":158},{"timestamp":"2026-09-11T04:42:07","port":5174,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip, deflate, br, zstd\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5174\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Google Chrome\\\";v=\\\"153\\\", \\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"153\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"Linux\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"vitesweep-browser/1\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"vitesweep-browser/1","ja3":"2e3766685db2ac8c71f0d5e6730b4332","session":"8b73e506-207d-4d1a-9c86-ab7c7d5affd0","seq":1,"duration_ms":100,"bytes_in":615,"bytes_out":79},{"timestamp":"2026-09-11T04:42:02","port":5174,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"<HONEYPOT>:5174\",\"pragma\":\"no-cache\",\"referer\":\"http://<HONEYPOT>:5174/\",\"user-agent\":\"vitesweep-browser/1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353137340d0a557365722d4167656e743a207669746573776565702d62726f777365722f310d0a4163636570743a20696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c696d6167652f7376672b786d6c2c696d6167652f2a2c2a2f2a3b713d302e380d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a507261676d613a206e6f2d63616368650d0a526566657265723a20687474703a2f2f<HONEYPOT>3a353137342f0d0a0d0a","method":"GET","user_agent":"vitesweep-browser/1","ja3":"","session":"c88fa05f-e247-4931-b2e4-2aca97a84a9b","seq":1,"duration_ms":100,"bytes_in":305,"bytes_out":79}],"http_methods":[{"method":"GET","count":67048},{"method":"POST","count":7}],"distinct_ports_total":24,"top_paths":[{"path":"/","count":1347,"ports":17},{"path":"/@vite/client","count":104,"ports":14},{"path":"/@vite/env","count":101,"ports":14},{"path":"/bundledDevClient.mjs","count":97,"ports":14},{"path":"/vite/client","count":90,"ports":14},{"path":"/@hmr","count":90,"ports":14},{"path":"/@hmr.js","count":90,"ports":14},{"path":"/vite/client.mjs","count":90,"ports":14},{"path":"/__hmrClient.mjs","count":90,"ports":14},{"path":"/__vite_ping","count":90,"ports":14},{"path":"/vite/hmr","count":90,"ports":14},{"path":"/vite/client.js","count":90,"ports":14},{"path":"/vite/hmr.js","count":90,"ports":14},{"path":"/vite/hmr.mjs","count":90,"ports":14},{"path":"/@hmr.mjs","count":90,"ports":14}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[{"value":"file","count":7},{"value":"vite-posture-probe.invalid","count":7},{"value":"localhost","count":6},{"value":"miner-hostcheck-25762b84.invalid","count":2},{"value":"miner-hostcheck-d7579948.invalid","count":2},{"value":"miner-hostcheck-e94fa756.invalid","count":2},{"value":"miner-hostcheck-fbb317c2.invalid","count":2},{"value":"miner-hostcheck-f6e57df9.invalid","count":2},{"value":"miner-hostcheck-f302cea1.invalid","count":2},{"value":"miner-hostcheck-323d1a05.invalid","count":2}],"top_alpns":[{"value":"h2, http/1.1","count":996},{"value":"http/1.1","count":433}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Host","Pragma","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br, zstd","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"<HONEYPOT>:5174","notable":false},{"name":"Pragma","value":"no-cache","notable":false},{"name":"Sec-Ch-Ua","value":"\"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\", \"Chromium\";v=\"153\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"Linux\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"vitesweep-browser/1","notable":false}],"distinct_sets":4,"events_with_headers":10},"tags":[{"tag_id":"CVE-2025-31125","tag_type":"cve","title":"Vite Development Server - Path Traversal","severity":"medium","actively_exploited":true,"match_field":"url_path","matched_pattern":"/@fs/etc/passwd?import&?inline=1.wasm?init","reference_urls":["https://github.com/vitejs/vite/issues/8498","https://github.com/vitejs/vite/pull/8804","https://github.com/vitejs/vite/pull/8979","https://nvd.nist.gov/vuln/detail/CVE-2025-31125"]},{"tag_id":"CVE-2019-18922","tag_type":"cve","title":"Allied Telesis AT-GS950/8 - Local File Inclusion","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../../etc/passwd","reference_urls":["https://packetstormsecurity.com/files/155504/Allied-Telesis-AT-GS950-8-Directory-Traversal.html","https://pastebin.com/dpEGKUGz","https://nvd.nist.gov/vuln/detail/CVE-2019-18922","http://packetstormsecurity.com/files/155504/Allied-Telesis-AT-GS950-8-Directory-Traversal.html","http://seclists.org/fulldisclosure/2019/Nov/31"]},{"tag_id":"CVE-2019-7315","tag_type":"cve","title":"Genie Access WIP3BVAF IP Camera - Local File Inclusion","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../etc/passwd","reference_urls":["https://labs.nettitude.com/blog/cve-2019-7315-genie-access-wip3bvaf-ip-camera-directory-traversal/","https://vuldb.com/?id.136593","https://nvd.nist.gov/vuln/detail/CVE-2019-7315","https://github.com/ARPSyndicate/kenzer-templates"]},{"tag_id":"CVE-2023-39141","tag_type":"cve","title":"Aria2 WebUI - Path traversal","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../etc/passwd","reference_urls":["https://twitter.com/win3zz/status/1694239332465520684","https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e","https://github.com/ziahamza/webui-aria2/blob/109903f0e2774cf948698cd95a01f77f33d7dd2c/node-server.js#L10","https://github.com/codeb0ss/CVE-2023-39141-PoC","https://github.com/nomi-sec/PoC-in-GitHub"]},{"tag_id":"CVE-2024-41628","tag_type":"cve","title":"Cluster Control CMON API - Directory Traversal","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/../../../../../../../../..//etc/passwd","reference_urls":["https://cvefeed.io/vuln/detail/CVE-2024-41628","https://github.com/Redshift-CyberSecurity/CVE-2024-41628","https://vuldb.com/?id.272533","https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-41628"]},{"tag_id":"CVE-2025-30208","tag_type":"cve","title":"Vite - Arbitrary File Read","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/etc/passwd?raw","reference_urls":["https://github.com/vitejs/vite/security/advisories/GHSA-x574-m823-4x7w","https://nvd.nist.gov/vuln/detail/CVE-2025-30208"]},{"tag_id":"CVE-2025-31486","tag_type":"cve","title":"Vite server.fs.deny Bypass - Local File Inclusion","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/etc/passwd?.svg?.wasm?init","reference_urls":["https://github.com/advisories/GHSA-xcj6-pq6g-qj4x","https://github.com/vitejs/vite/blob/037f801075ec35bb6e52145d659f71a23813c48f/packages/vite/src/node/plugins/asset.ts#L285-L290","https://github.com/vitejs/vite/commit/62d7e81ee189d65899bb65f3263ddbd85247b647","https://github.com/vitejs/vite/security/advisories/GHSA-xcj6-pq6g-qj4x","https://nvd.nist.gov/vuln/detail/CVE-2025-31486"]}],"data_as_of":"2026-09-22T16:04:15.780804+00:00"}