PT-2026-138438

Name of the Vulnerable Software and Affected Versions esm.sh versions prior to 137 7 Description The web.NewHandler static file server in web/handler.go fails to verify that the result of joining the URL-decoded r.URL.Path with Config.AppDir remains within the configured application directory. An...