Products: 1
Vulnerabilities: 9
Known Exploited: 0
0
Critical Level Threats
5
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-44594
esm.sh: Path Traversal via package.json browser field allows reading arbitrary server files
Last Modified: May 30, 2026
Published: May 28, 2026
CVE-2026-44593
esm.sh: Legacy Route Path Traversal Can Lead to RCE
Last Modified: Jun 02, 2026
Published: May 28, 2026
CVE-2026-27730
esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route
Last Modified: Apr 18, 2026
Published: Feb 25, 2026
CVE-2025-50180
esm.sh is vulnerable to full-response SSRF
Last Modified: Feb 27, 2026
Published: Feb 25, 2026
CVE-2026-23644
esm.sh has path traversal in `extractPackageTarball` that enables file writes from malicious packages
Last Modified: Apr 18, 2026
Published: Jan 18, 2026
Items Per Page
