Package · Ubuntu

vue.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.3

CVE-2026-9595

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the proxy target. This leaks the browser's cookies and Origin header to the backend,…

webpack-dev-server webpack-dev-server katib-suggestion-hyperopt katib-earlystopping Ubuntu Wolfi npm

Jun 15, 2026