Skip to content
OpenAdvisories

Package · Debian

node-webpack

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28154

    Cross-realm object access in Webpack 5

    Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.

    node-webpack webpack node-webpack Debian Ubuntu npm