Skip to content
OpenAdvisories

Package · npm

webpack-dev-middleware

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.4
    CVE-2026-76844

    zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write

    zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer a…

    zlib zlib zlib webpack-dev-middleware Debian npm
  • High 7.4
    CVE-2024-29180

    webpack-dev-middleware Path Traversal vulnerability

    Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The…

    webpack webpack-dev-middleware webpack-dev-middleware npm