{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/esm-dev/esm.sh","cve_ids":["CVE-2025-59341"],"ecosystem":"Go","epss":0.01636,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-49pv-gwxp-532r","id":"tcs_01M5KGAEDWX89FNQG8BZ4PDGNA","modified_at":"2026-03-03T04:56:56.488804Z","published_at":"2025-09-24T19:21:37Z","references":["https://osv.dev/vulnerability/GO-2025-3962","https://github.com/esm-dev/esm.sh/security/advisories/GHSA-49pv-gwxp-532r","https://nvd.nist.gov/vuln/detail/CVE-2025-59341","https://github.com/esm-dev/esm.sh/commit/492de92850dd4d350c8b299af541f87541e58a45","https://github.com/esm-dev/esm.sh/blob/c62f191d32639314ff0525d1c3c0e19ea2b16143/server/router.go#L1168"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GO-2025-3962","url":"https://osv.dev/vulnerability/GO-2025-3962"},{"source":"nvd","source_id":"CVE-2025-59341","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59341"}],"summary":"esm.sh has File Inclusion issue in github.com/esm-dev/esm.sh"}