node-webpack vulnerabilities (Ubuntu)
7 vulnerabilities.
-
node-webpackUbuntu webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint 5.3 Medium -
node-webpackUbuntu webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades 8.2 High -
node-webpackUbuntu webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies 5.3 Medium -
node-webpackUbuntu webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior 3.7 Low -
node-webpackUbuntu webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects 3.7 Low -
node-webpackUbuntu DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS) 6.4 Medium -
node-webpackUbuntu Cross-realm object access in Webpack 5 9.8 Critical