Affected: vitejs launch-editor, vitejs vite, Red Hat Cluster Observability Operator 1.5.0, Red Hat Cryostat 4, Red Hat Migration Toolkit for Containers, Red Hat Node HealthCheck Operator, Red Hat OpenShift Lightspeed, Red Hat OpenShift Pipelines, Red Hat OpenShift Service Mesh 2, Red Hat OpenShift Service Mesh 3 and 18 more

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters. This issue has been fixed in the `launch-editor` version 2.9.0, corresponding to vite version 5.4.9.