Esm-dev vulnerabilities
Products
- Esm.sh 9
Newest
- esm-dev esm.sh esm.sh: Path Traversal via package.json browser field allows reading arbitrary server files 7.5 High
- esm-dev esm.sh esm.sh: Legacy Route Path Traversal Can Lead to RCE 8.7 High
- esm esm.sh esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route 8.6 High
- esm esm.sh esm.sh is vulnerable to full-response SSRF 8.7 High
- esm esm.sh esm.sh has path traversal in `extractPackageTarball` that enables file writes from malicious packages 7.7 High
- esm esm.sh esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript 6.1 Medium
- esm esm.sh esm.sh CDN service has arbitrary file write via tarslip 8.2 High
- esm-dev esm.sh esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header 5.5 Medium
- esm-dev esm.sh Local File Inclusion in esm.sh 7.7 High