farm-fe/farm

Releases1.51K

Frequency19 hours

Last Release 8 days ago

Stars5.58K

Extremely fast Vite-compatible web build tool written in Rust

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-56647 ↗	Feb 12, 2026Thursday, 12 February 2026, 16:16	6.5 MEDIUM	—
npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their webpage and steal source code that is leaked by the WebSocket server.