Skip to main content

Origin Validation Error in esbuild

Cxbb85e86c-2fac

  • esbuild
  • esbuild-wasm
  • evanw/esbuild
  • github.com/evanw/esbuild
  • org.webjars.npm:esbuild
  • org.webjars.npm:esbuild-windows-64
Medium
5.3/10

Summary

esbuild is an extremely fast bundler for the web, allowing any website to send any request to the development server and read the response due to default CORS settings. This issue affects versions prior to 0.25.0.

  • HIGH
  • NETWORK
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • NONE

CWE-346 - Origin Validation Error

The software does not properly verify that the source of data or communication is valid.

References

Advisory Timeline

  • Published