vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.
NVD-CWE-noinfo