launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

Vite has a `server.fs.deny` bypass with queries

Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file

Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`

Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor: escapeCmdArgs() omits % escaping on Windows

NTLMv2 hash disclosure via UNC path handling on Windows

Vite has a Path Traversal in Optimized Deps `.map` Handling

Vite: Cross origin script execution through Vite custom middleware