esm vulnerabilities

Recent CVEs affecting esm products. 5 tracked.

esm has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-25. Highest priority: CVE-2025-65025 (score 50/100).

• CVE-2025-65025 HIGH 8.2 UPGRADE esm.sh is a nobuild content delivery network(CDN) for modern web development
• CVE-2025-65026 MEDIUM 6.1 UPGRADE esm.sh is a nobuild content delivery network(CDN) for modern web development
• CVE-2026-27730 HIGH 7.5 UPGRADE esm.sh is a no-build content delivery network (CDN) for web development
• CVE-2026-23644 HIGH 7.5 UPGRADE esm.sh is a no-build content delivery network (CDN) for web development
• CVE-2025-50180 HIGH 7.5 UPGRADE esm.sh is a no-build content delivery network (CDN) for web development

FAQ

How do I fix esm vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is esm being exploited right now?

None of the tracked esm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which esm CVE should I patch first?

CVE-2025-65025 currently ranks highest (50/100): esm.sh is a nobuild content delivery network(CDN) for modern web development.

Products

• esm.sh

RSS feed for esm · ← Back to latest CVEs