CVE-2025-59341 – Local File Inclusion in esm.sh

CVE ID : CVE-2025-59341

Published : Sept. 17, 2025, 6:15 p.m. | 44 minutes ago

Description : esm.sh is a nobuild content delivery network(CDN) for modern web development. In 136 and earlier, a Local File Inclusion (LFI) issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem (or other unintended file sources).

Severity: 7.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…