Skip to content
OpenAdvisories

Package · npm

esbuild

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-67mh-4wv8-2f99

    esbuild enables any website to send any requests to the development server and read the response

    ### Summary esbuild allows any websites to send any request to the development server and read the response due to default CORS settings. ### Details esbuild sets `Access-Control-Allow-Origin: *` header to all requests, including the SSE connection, which all…

    esbuild npm