UnratedFix available
v0.28.0
Type: patchSources: esbuild
esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.
- Products
- esbuild
- Affected versions
- Not specified
- Fixed versions
- v0.28.0
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 02:54 UTC · Revision 1
Source evidence
esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.
With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release.
esbuild
Fixed versions: v0.28.0
Complete source record
{
"id": "d76b928735b25d080146d583634e1bc8c5be3e01c3e524504a6a0fbdbc8ce412",
"url": "https://github.com/evanw/esbuild/releases/tag/v0.28.0",
"method": "llm",
"payload": {
"kind": "patch",
"title": "v0.28.0",
"summary": "esbuild v0.28.0 adds integrity checks to the fallback download path, verifying that a downloaded binary matches the expected hash for the current release.",
"evidence": "With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release.",
"products": [
{
"name": {
"value": "esbuild",
"evidence": "Release notes from esbuild"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "v0.28.0",
"evidence": "v0.28.0"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-evanw-esbuild",
"document_id": 21017,
"published_at": "2026-04-02T20:38:53+00:00"
}