cve.nowby Sazabi

Package

github.com/esm-dev/esm.sh/web

1 known CVE (1 high), with the versions each affects and the releases that fix them.

Go

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 1 · 1 high

Registry: pkg.go.dev

Advisories 1

CVE-2026-102657High 7.5
esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal
Affected: fixed in 0.2.0.