CVE-2026-102657 | esm-dev esm.sh up to 137_6 Static File Server web/handler.go web.NewHandler path traversal

November 6, 2026 Yanac

A vulnerability classified as problematic has been found in esm-dev esm.sh up to 137_6. This affects the function web.NewHandler of the file web/handler.go of the component Static File Server. The manipulation leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-102657. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More