Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-g7r4-m6w7-qqqr
  • npm/esbuild
 esbuild allows arbitrary file read when running the development server on Windows 12 Jun
  • Fix available
  • Severity - 2.5 (Low)
MAL-2025-191087
  • npm/esbuild-plugin-brotli
 Malicious code in esbuild-plugin-brotli (npm) 24 Nov 2025
  • No fix available
MAL-2025-190840
  • npm/esbuild-plugin-eta
 Malicious code in esbuild-plugin-eta (npm) 24 Nov 2025
  • No fix available
MAL-2025-190771
  • npm/esbuild-plugin-httpfile
 Malicious code in esbuild-plugin-httpfile (npm) 24 Nov 2025
  • No fix available
MAL-2025-19818
  • npm/esbuild-linux-arm32
 Malicious code in esbuild-linux-arm32 (npm) 14 Aug 2025
  • No fix available
GHSA-67mh-4wv8-2f99
  • npm/esbuild
 esbuild enables any website to send any requests to the development server and read the response 10 Feb 2025
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2024-9597
  • npm/esbuild-plugin-global-externals
 Malicious code in esbuild-plugin-global-externals (npm) 16 Oct 2024
  • No fix available