https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:13:30.938488+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-50180 CVE-2025-50180 — esm.sh is vulnerable to full-response SSRF 2026-10-08T20:13:30.958029+00:00

Affected: esm-dev esm.sh

esm.sh is a no-build content delivery network (CDN) for web development. In version 136, esm.sh is vulnerable to a full-response SSRF, allowing an attacker to retrieve information from internal websites through the vulnerability. Version 137 fixes the vulnerability.