npm/esbuild: low 2.5
esbuild allows arbitrary file read when running the development server on Windows
Action: Upgrade esbuild to 0.28.1 or later.
npm i esbuild@0.28.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.27.3 | 0.28.1 | - |
Fixed versions
| 0.28.1 |
Sources
- osv: GHSA-g7r4-m6w7-qqqr
- https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr
- https://github.com/evanw/esbuild
- https://github.com/evanw/esbuild/releases/tag/v0.28.1
published · modified · JSON