Read the docs

esm-dev

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

esm-dev records in CISA KEV

No esm-dev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Esm.sh · all components

Priority HIGH 81

esm.sh is a nobuild content delivery network(CDN) for modern web development.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00571 Published 2025-11-19 Fixed in 136, 0.0.0-20251117232647-9d77b88c3207 CWE-22
TI-2025-32063 CVE-2025-50180 · GHSA-3c9r-837r-qqm4

esm.sh is vulnerable to full-response SSRF

Priority HIGH 77

esm.sh is a no-build content delivery network (CDN) for web development.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00437 Published 2026-02-25 Fixed in 0.0.0-20250616164159-0593516c4cfa CWE-918
Open these records in search →