CVE-2025-50180
esm.sh is vulnerable to full-response SSRF
概要
esm.sh is vulnerable to full-response SSRF
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is vulnerable to a full-response SSRF, allowing an attacker to retrieve information from internal websites through the vulnerability. Version 137 fixes the vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com
- web github.com
- web github.com