Skip to content
OpenAdvisories

Package · npm

@rspack/core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.4
    GHSA-84jw-g43v-8gjm

    DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS

    Hi, Rspack|Webpack developer team! ## Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controll…

    @rspack/core npm