Malicious code in node-ts-esm-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47698 Malicious code in node-ts-esm-web (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in node-ts-esm (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47697 Malicious code in node-ts-esm (npm)

--- -= Per source details. Do not edit below this line.=-...

GO-2025-3967 esm.sh has arbitrary file write via path traversal in `X-Zone-Id` header in github.com/esm-dev/esm.sh

esm.sh has arbitrary file write via path traversal in X-Zone-Id header in github.com/esm-dev/esm.sh...

CVE-2025-59341

esm.sh is a nobuild content delivery networkCDN for modern web development. In 136 and earlier, a Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...

Exploit for CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Author: Byte Reape...

GHSA-G2H5-CVVR-7GMW esm.sh has arbitrary file write via path traversal in `X-Zone-Id` header

Summary A path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a filesystem path but is not properly canonicalized or restricted to the application’s...

PT-2025-38247

Name of the Vulnerable Software and Affected Versions esm.sh versions prior to 136 Description A Local File Inclusion LFI issue was identified in the esm.sh service URL handling. An attacker could craft a request that causes the server to read and return files from the host filesystem or other...

Malicious code in esm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3efe53ebf45af2f0e8bd58b829f79db6f064cef648ae981ea86a7e24b77a39d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41821 Malicious code in esm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3efe53ebf45af2f0e8bd58b829f79db6f064cef648ae981ea86a7e24b77a39d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Open5GS Denial of Service Vulnerability (CNVD-2025-18546)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability, which can be exploited by an attacker to cause a denial of service via the function esmhandlepdnconnectivityrequest...

Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

MAL-2025-19121 Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

PT-2025-54630

Уязвимость ЕСМ-системы Directum RX связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, нарушить целостность данных...

CVE-2025-8800 Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of service

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...

CVE-2024-39835

A code injection vulnerability has been identified in the Robot Operating System ROS 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval method to process user-supplied, unsanitized parameter values within the...

CVE-2024-39289

A code execution vulnerability has been discovered in the Robot Operating System ROS 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval function to process unsanitized, user-supplied parameter values via special converters fo...

MAL-2025-6108 Malicious code in node-ts-esm-auto (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malware in vite-plugin-esm-federation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...