CVE-2025-59341

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...

CVE-2025-59341

CVE-2025-59341 is evidenced by the connected document: nuclei template describing esm.sh

CVE-2025-59341 Local File Inclusion in esm.sh

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...

CVE-2025-59341

creationtimestamp| type| source ---|---|--- 2025-09-17 04:25:08+00:00| published-proof-of-concept| https://github.com/esm-dev/esm.sh/security/advisories/GHSA-49pv-gwxp-532r 2026-04-22 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt5k7k2h...