npm›vite-plugin-static-copy›CVE-2025-57753vite-plugin-static-copy files not included in `src` are possible to access with a crafted requestFiles not included in src was possible to access with a crafted request.