farm-fe/farm

Releases1.51K

Frequency19 hours 14 minutes

Last Releaseabout 1 month ago

Stars5.59K

Extremely fast Vite-compatible web build tool written in Rust

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2025-56647NVD↗	—	Feb 12, 2026Thursday, 12 February 2026, 16:16	6.5 MEDIUM	—
npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their webpage and steal source code that is leaked by the WebSocket server.