Skip to content
Heist/ feed
Back to feed
UnratedFix available

v0.28.0

Type: patchSources: esbuild

esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.

Products
esbuild
Affected versions
Not specified
Fixed versions
v0.28.0
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
28 Oct 2026, 02:54 UTC · Revision 1

Source evidence

v0.28.0

github-evanw-esbuild · Original source

Published 2 Apr 2026, 20:38 UTC

esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.

With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release.

esbuild

Fixed versions: v0.28.0

Complete source record
{
  "id": "d76b928735b25d080146d583634e1bc8c5be3e01c3e524504a6a0fbdbc8ce412",
  "url": "https://github.com/evanw/esbuild/releases/tag/v0.28.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "v0.28.0",
    "summary": "esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.",
    "evidence": "With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release.",
    "products": [
      {
        "name": {
          "value": "esbuild",
          "evidence": "Release notes from esbuild"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v0.28.0",
            "evidence": "v0.28.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-evanw-esbuild",
  "document_id": 21017,
  "published_at": "2026-04-02T20:38:53+00:00"
}