Security
فارسی
All products

github.com/esm-dev/esm.sh

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
esm.sh has File Inclusion issueCVE-2025-59341 · GHSA-49PV-GWXP-532RVersion ranges need review. github.com/esm-dev/esm.sh Go High No fix reported
esm.sh has arbitrary file write via path traversal in `X-Zone-Id` headerCVE-2025-59342 · GHSA-G2H5-CVVR-7GMWVersion ranges need review. github.com/esm-dev/esm.sh Go Medium Fix reported
esm.sh has a path traversal in extractPackageTarball enables file writes from malicious packagesCVE-2026-23644 · GHSA-2657-3C98-63JQVersion ranges need review. github.com/esm-dev/esm.sh Go High Fix reported
esm.sh: Path Traversal via package.json browser field allows reading arbitrary server filesCVE-2026-44594 · GHSA-RG65-45M7-HQ57Version ranges need review. github.com/esm-dev/esm.sh Go High Fix reported
esm.sh: Legacy Route Path Traversal Can Lead to RCECVE-2026-44593 · GHSA-3636-H3VX-6465Version ranges need review. github.com/esm-dev/esm.sh Go High Fix reported
esm.sh has SSRF localhost/private-network bypass in `/http(s)` module routeCVE-2026-27730 · GHSA-P2V6-84H2-5X4RVersion ranges need review. github.com/esm-dev/esm.sh Go High Fix reported
esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScriptCVE-2025-65026 · GHSA-HCPF-QV9M-VFGPVersion ranges need review. github.com/esm-dev/esm.sh Go Medium Fix reported
esm.sh CDN service has arbitrary file write via tarslipCVE-2025-65025 · GHSA-H3MW-4F23-GWPWVersion ranges need review. github.com/esm-dev/esm.sh Go High Fix reported
esm.sh is vulnerable to full-response SSRFCVE-2025-50180 · GHSA-3C9R-837R-QQM4Version ranges need review. github.com/esm-dev/esm.sh Go High Fix reported