webpack vulnerabilities

webpack-dev-middleware before 7.4.6 and 8.3.0 Path Traversal via Non-Slash-Terminated publicPath

webpack · webpack-dev-middleware

webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

webpack · webpack

webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

webpack · webpack

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

webpack · webpack-dev-server

webpack-dev-server users' source code may be stolen when they access a malicious web site

webpack · webpack-dev-server

DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)

webpack · webpack

webpack-dev-middleware Path Traversal vulnerability

webpack · webpack-dev-middleware