CVE-2025-59342

This repository contains a proof-of-concept exploit for CVE-2025-59342, a path traversal vulnerability in esm.sh (version 136 and earlier). The exploit leverages the `X-Zone-Id` HTTP header to perform directory traversal attacks, allowing arbitrary file writes outside the intended storage location.

The exploit demonstrates a path traversal vulnerability in esm-dev version 136 by sending crafted requests to the `/transform` endpoint with various encoded payloads. It uses libcurl to perform HTTP requests and includes multiple payload variations to bypass potential filters.