VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/evanw/esbuild: vulnerability history, versions and safety

github.com/evanw/esbuild is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the Go ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/evanw/esbuild vulnerabilities

Vulert verdict on github.com/evanw/esbuild v0.28.2 i

Updated on 23 Oct 2026

Good news: v0.28.2, the version you would install today, has no known vulnerabilities.

Package health score 87/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Stay on v0.28.2 or newer. This can change: a vulnerability disclosed tomorrow can affect v0.28.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release v0.28.2 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 40,099 i
  • OpenSSF scorecard 3/10 i
  • Last release 2 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/evanw/esbuild, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.28.3-0.20260809171712-f6058f8364fe 09 Aug 2026 none MIT — Details →
v0.0.0-20260808194644-609683d89297 08 Aug 2026 none MIT — Details →
v0.28.2 08 Aug 2026 none MIT — Details →
v0.28.2-0.20260808044748-2500c0ce2d22 08 Aug 2026 none MIT — Details →
v0.28.2-0.20260612013229-6ff1d8b0d8c1 12 Jun 2026 none MIT — Details →
v0.0.0-20260611222609-bb9db84c0243 11 Jun 2026 none MIT — Details →
v0.28.1 11 Jun 2026 none MIT — Details →
v0.28.1-0.20260609031016-308ad745d824 09 Jun 2026 none MIT — Details →
v0.0.0-20260402202356-6a794dff68e6 02 Apr 2026 none MIT — Details →
v0.28.0 02 Apr 2026 none MIT — Details →
v0.27.7 02 Apr 2026 none MIT — Details →
v0.27.5 02 Apr 2026 none MIT — Details →
v0.27.4 12 Mar 2026 none MIT — Details →
v0.27.3 05 Feb 2026 none MIT — Details →
v0.27.2 17 Dec 2025 none MIT — Details →
v0.27.2-0.20251215060240-add452ed5133 15 Dec 2025 none MIT — Details →
v0.27.2-0.20251214055554-14fd59c47300 14 Dec 2025 none MIT — Details →
v0.27.1 03 Dec 2025 none MIT — Details →
v0.27.1-0.20251111050323-d6427c91edab 11 Nov 2025 none MIT — Details →
v0.27.1-0.20251110035846-48e3e19bbf5c 10 Nov 2025 none MIT — Details →
v0.27.1-0.20251109225044-4ff88d010625 09 Nov 2025 none MIT — Details →
v0.27.0 09 Nov 2025 none MIT — Details →
v0.26.1-0.20251109042402-6d187ef4c927 09 Nov 2025 none MIT — Details →
v0.26.1-0.20251109041903-9d0d4e71a23d 09 Nov 2025 none MIT — Details →
v0.0.0-20251109024302-17ff82bebfaf 09 Nov 2025 none MIT — Details →
v0.26.0 09 Nov 2025 none MIT — Details →
v0.25.13-0.20251102162943-fdece9513e3d 02 Nov 2025 none MIT — Details →
v0.0.0-20251101233416-208f539945b1 01 Nov 2025 none MIT — Details →
v0.25.12 01 Nov 2025 none MIT — Details →
v0.25.12-0.20251101201021-07aa646bb2fd 01 Nov 2025 none MIT — Details →
v0.0.0-20251015021112-6b7c4f2dcbca 15 Oct 2025 none MIT — Details →
v0.25.11 15 Oct 2025 none MIT — Details →
v0.25.11-0.20251003165128-8f506d5ca688 03 Oct 2025 none MIT — Details →
v0.0.0-20250917161616-d6b668f96fb0 17 Sep 2025 none MIT — Details →
v0.25.10 17 Sep 2025 none MIT — Details →
v0.25.10-0.20250825211519-134dadffecf5 25 Aug 2025 none MIT — Details →
v0.0.0-20250812232519-195e05c16f03 12 Aug 2025 none MIT — Details →
v0.25.9 12 Aug 2025 none MIT — Details →
v0.0.0-20250719191404-8c71947edbe5 19 Jul 2025 none MIT — Details →
v0.25.8 19 Jul 2025 none MIT — Details →
v0.25.8-0.20250719190242-0508f2444569 19 Jul 2025 none MIT — Details →
v0.25.8-0.20250719190242-6e4be2fad3c8 19 Jul 2025 none MIT — Details →
v0.25.8-0.20250719190240-c9c6357a8dbf 19 Jul 2025 none MIT — Details →
v0.0.0-20250718224938-9b42f68f9b1f 18 Jul 2025 none MIT — Details →
v0.25.7 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250718223747-9ba01d1c1faf 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250718211132-ca196c9c4a27 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250718205434-2979b846fd7e 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250718201140-1180410e335f 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250718182442-fc3da579557d 18 Jul 2025 none MIT — Details →
v0.25.7-0.20250711003404-492e299ce6fa 11 Jul 2025 none MIT — Details →
v0.25.7-0.20250711000833-c77fc585833f 11 Jul 2025 none MIT — Details →
v0.25.7-0.20250708003201-2ba0f0233497 08 Jul 2025 none MIT — Details →
v0.25.7-0.20250707230943-3dd63dbec584 07 Jul 2025 none MIT — Details →
v0.0.0-20250707165711-d38c1f0bc580 07 Jul 2025 none MIT — Details →
v0.25.6 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707054430-11e547e2c7b4 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707041958-cc8ac0a5f495 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707041911-1e3fb57adcbd 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707041853-c1f5f18e8308 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707031210-3ed5ecce847a 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707022613-248089c1a839 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707015036-42f159cb52e1 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707014913-63256e12bedc 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250707014330-d803f72e64c9 07 Jul 2025 none MIT — Details →
v0.25.6-0.20250706225224-0231961d467d 06 Jul 2025 none MIT — Details →
v0.25.6-0.20250706222808-cbd81f276c7e 06 Jul 2025 none MIT — Details →
v0.25.6-0.20250706221935-34c77ca5702a 06 Jul 2025 none MIT — Details →
v0.25.6-0.20250706211027-4b596cec0303 06 Jul 2025 none MIT — Details →
v0.25.6-0.20250706201803-3fd8dfa0f9aa 06 Jul 2025 none MIT — Details →
v0.25.6-0.20250527214642-f4159a7b823c 27 May 2025 none MIT — Details →
v0.0.0-20250527031158-ea453bf687c8 27 May 2025 none MIT — Details →
v0.25.5 27 May 2025 none MIT — Details →
v0.25.5-0.20250517182212-28cf2f3e7f4b 17 May 2025 none MIT — Details →
v0.0.0-20250506002945-218d29e9da01 06 May 2025 none MIT — Details →
v0.25.4 06 May 2025 none MIT — Details →
v0.25.4-0.20250423043806-5959289d9066 23 Apr 2025 none MIT — Details →
v0.0.0-20250423035133-677910b07319 23 Apr 2025 none MIT — Details →
v0.25.3 23 Apr 2025 none MIT — Details →
v0.25.3-0.20250423031603-dfe0e1c63239 23 Apr 2025 none MIT — Details →
v0.25.3-0.20250423023014-a54916b92c12 23 Apr 2025 none MIT — Details →
v0.0.0-20250330173114-4475787eef4c 30 Mar 2025 none MIT — Details →
v0.25.2 30 Mar 2025 none MIT — Details →
v0.25.2-0.20250327172711-8f56771afc37 27 Mar 2025 none MIT — Details →
v0.25.2-0.20250312031123-36b458d14479 12 Mar 2025 none MIT — Details →
v0.25.2-0.20250310195034-75286c1b4fab 10 Mar 2025 none MIT — Details →
v0.25.2-0.20250310034849-37cb6a2bc3da 10 Mar 2025 none MIT — Details →
v0.0.0-20250310034244-6bfc1c13b4d9 10 Mar 2025 none MIT — Details →
v0.25.1 10 Mar 2025 none MIT — Details →
v0.25.1-0.20250208031548-b914dd302943 08 Feb 2025 none MIT — Details →
v0.0.0-20250208030126-e9174d671b18 08 Feb 2025 none MIT — Details →
v0.25.0 08 Feb 2025 none MIT — Details →
v0.24.3-0.20250208015756-de85afd65ede 08 Feb 2025 none MIT — Details →
v0.0.0-20250207170341-da1de1bf77a6 07 Feb 2025 none MIT — Details →
v0.24.2-0.20250207170341-da1de1bf77a6 07 Feb 2025 none MIT — Details →
v0.24.3-0.20250207170341-da1de1bf77a6 07 Feb 2025 none MIT — Details →
v0.24.3-0.20250207032936-f4e9d19fb200 07 Feb 2025 none MIT — Details →
v0.24.3-0.20250204042417-5adc1da11069 04 Feb 2025 none MIT — Details →
v0.24.3-0.20250203022552-4b5f0d2ffb7f 03 Feb 2025 none MIT — Details →
v0.24.3-0.20250107031959-df815ac27b84 07 Jan 2025 none MIT — Details →
v0.24.3-0.20241226003131-15841359ea97 26 Dec 2024 none — — Details →
v0.0.0-20241220175519-745abd9f0c06 20 Dec 2024 none — — Details →
v0.24.2 20 Dec 2024 none — — Details →
v0.24.1 20 Dec 2024 none — — Details →
v0.24.1-0.20241220015105-8d98f6f6e663 20 Dec 2024 none — — Details →
v0.24.1-0.20241021204924-9eca46464ed5 21 Oct 2024 none — — Details →
v0.0.0-20240922020442-d34e79e2a998 22 Sep 2024 none — — Details →
v0.23.2-0.20240922020442-d34e79e2a998 22 Sep 2024 none — — Details →
v0.24.0 22 Sep 2024 none — — Details →
v0.0.0-20240816221242-332727499e62 16 Aug 2024 none — — Details →
v0.23.1 16 Aug 2024 none — — Details →
v0.23.1-0.20240816221242-332727499e62 16 Aug 2024 none — — Details →
v0.23.1-0.20240731142932-9c13ae1f06df 31 Jul 2024 none — — Details →
v0.23.1-0.20240725173129-78f89e41d5e8 25 Jul 2024 none — — Details →
v0.23.1-0.20240708200843-360d47230813 08 Jul 2024 none — — Details →
v0.23.1-0.20240703130733-e3f4e2d36dd9 03 Jul 2024 none — — Details →
v0.0.0-20240702033312-9d506806bdd9 02 Jul 2024 none — — Details →
v0.23.0 02 Jul 2024 none — — Details →
v0.22.0 30 Jun 2024 none — — Details →
v0.21.6-0.20240629143739-ab9b0021f1b0 29 Jun 2024 none — — Details →

The newest 120 of 1,156 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for github.com/evanw/esbuild

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/evanw/esbuild

Is github.com/evanw/esbuild safe to use?

Vulert has no vulnerabilities on record for github.com/evanw/esbuild in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is github.com/evanw/esbuild's Vulert package health score?

Vulert scores github.com/evanw/esbuild 87/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/evanw/esbuild affected?

No. v0.28.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of github.com/evanw/esbuild should I use?

v0.28.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/evanw/esbuild have?

0 vulnerabilities are recorded for github.com/evanw/esbuild in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/evanw/esbuild vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/evanw/esbuild in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/evanw/esbuild are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/evanw/esbuild for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/evanw/esbuild version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.