Webpack vulnerabilities
Products
Newest
- webpack webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior 3.7 Low
- webpack webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects 3.7 Low
- webpack webpack-dev-server webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser 6.5 Medium
- webpack webpack-dev-server webpack-dev-server users' source code may be stolen when they access a malicious web site 5.3 Medium
- webpack DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS) 6.4 Medium
- webpack webpack-dev-middleware webpack-dev-middleware Path Traversal vulnerability 7.4 High