esbuild
v0.28.2An extremely fast bundler for the web
- Maintenance
- SlowBased on the last push: commit history is not collected yet
- License
- MITPermissive · OSI-approved
- Security
- 3 advisories1 high, 1 medium, 1 low · Scorecard 5.0/10
- Supported versions
- No scheduleendoflife.date does not track this project
40.1k stars · 1.4k forks · 672 open issues · last release 3 months ago · data checked 3 hours ago
Security advisories
All advisories on GitHubThe 3 most recent advisories published by the maintainers: 1 high, 1 medium, 1 low. Check the patched version against the one you run.
- highGHSA-gv7w-rqvm-qjhrJun 11, 2026Missing binary integrity verification in esbuild Deno module enables remote code execution via NPM_CONFIG_REGISTRY
- Affected
- >=0.17.0
- Patched in
- >=0.28.1
- lowGHSA-g7r4-m6w7-qqqrJun 11, 2026Arbitrary file read when running the development server on Windows
- Affected
- 0.27.3
- Patched in
- >=0.28.1
- mediumGHSA-67mh-4wv8-2f99Feb 8, 2025Any websites were able to send any requests to the development server and read the response
- Affected
- <=0.24.2
- Patched in
- >=0.25.0