CVE-2025-65025 | esm-dev esm.sh up to 135 CDN Service path traversal (GHSA-h3mw-4f23-gwpw)

November 19, 2025 Yanac

A vulnerability categorized as critical has been discovered in esm-dev esm.sh up to 135. The affected element is an unknown function of the component CDN Service. Executing manipulation can lead to path traversal.

This vulnerability appears as CVE-2025-65025. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More