Skip to content
OpenAdvisories

Package · npm

esbuild

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.5
    GHSA-g7r4-m6w7-qqqr

    esbuild allows arbitrary file read when running the development server on Windows

    ### Summary The development server contains a path traversal vulnerability on Windows when serving files from `servedir`. Due to the use of `path.Clean()` (which only normalizes forward-slash `/` separators) instead of a Windows-aware path normalization funct…

    esbuild npm