CVE-2025-50180highCWE-918

CVE-2025-50180: falha de alta gravidade em esm-dev esm.sh

esm.sh is vulnerable to full-response SSRF

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar esm.sh+ Monitorar github.com/esm-dev/esm.sh

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.4%
esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is vulnerable to a full-response SSRF, allowing an attacker to retrieve information from internal websites through the vulnerability. Version 137 fixes the vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
esm-dev · esm.sh
CVEs relacionadas — esm-dev esm.sh

No mesmo produto, das mais perigosas para as menos.

CVE-2025-59342MEDIUMesm.sh writes arbitrary files via path traversal in `X-Zone-Id` headerEPSS 3.2%CVE-2025-59341HIGHLocal File Inclusion in esm.shEPSS 1.6%CVE-2026-102657HIGHesm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversalEPSS 0.7%CVE-2025-65025HIGHesm.sh CDN service has arbitrary file write via tarslipEPSS 0.6%CVE-2026-23644HIGHesm.sh has path traversal in `extractPackageTarball` that enables file writes from malicious packagesEPSS 0.6%CVE-2025-65026MEDIUMesm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScriptEPSS 0.5%