Products: 1
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
4
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-27730
esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route
Last Modified: Apr 18, 2026
Published: Feb 25, 2026
CVE-2025-50180
esm.sh is vulnerable to full-response SSRF
Last Modified: Feb 27, 2026
Published: Feb 25, 2026
CVE-2026-23644
esm.sh has path traversal in `extractPackageTarball` that enables file writes from malicious packages
Last Modified: Apr 18, 2026
Published: Jan 18, 2026
CVE-2025-65026
esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript
Last Modified: Jan 15, 2026
Published: Nov 19, 2025
CVE-2025-65025
esm.sh CDN service has arbitrary file write via tarslip
Last Modified: Jan 15, 2026
Published: Nov 19, 2025
Items Per Page
