webpack-dev-server vulnerabilities
6 published CVEs name webpack-dev-server among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-114348
webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint
webpack-dev-server · webpack-dev-server
Medium5.3 - CVE-2026-112085
webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades
webpack-dev-server · webpack-dev-server
High8.2 - CVE-2026-14631
webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
webpack-dev-server · webpack-dev-server
Medium5.3 - CVE-2026-14620
webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
webpack-dev-server · webpack-dev-server
Medium4.7 - CVE-2026-9595
webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
webpack-dev-server · webpack-dev-server
Medium5.3 - CVE-2026-6402
webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins
webpack-dev-server · webpack-dev-server
Medium5.3