Go/github.com/esm-dev/esm.sh CVE-2025-59341: high, EPSS 1.64%
esm.sh has File Inclusion issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 136 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-49pv-gwxp-532r
- https://github.com/esm-dev/esm.sh/security/advisories/GHSA-49pv-gwxp-532r
- https://nvd.nist.gov/vuln/detail/CVE-2025-59341
- https://github.com/esm-dev/esm.sh/commit/492de92850dd4d350c8b299af541f87541e58a45
- https://github.com/esm-dev/esm.sh
- https://github.com/esm-dev/esm.sh/blob/c62f191d32639314ff0525d1c3c0e19ea2b16143/server/router.go#L1168
- https://pkg.go.dev/vuln/GO-2025-3962
CVE-2025-59341 · published · modified · JSON