Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-m28w-2pqf-7qgj
  • npm/webpack-dev-server
 webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header 20 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-f5vj-f2hx-8m93
  • npm/webpack-dev-server
 webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints 20 Jul
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-mx8g-39q3-5c79
  • npm/webpack-dev-server
 webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies 17 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-79cf-xcqc-c78w
  • npm/webpack-dev-server
 webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins 18 May
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-9jgg-88mc-972h
  • npm/webpack-dev-server
 webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser 04 Jun 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-4v9v-hfq4-rm2v
  • npm/webpack-dev-server
 webpack-dev-server users' source code may be stolen when they access a malicious web site 04 Jun 2025
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-cf66-xwfp-gvc4
  • npm/webpack-dev-server
 Missing Origin Validation in webpack-dev-server 04 Jan 2019
  • Fix available
  • Severity - 7.5 (High)