Skip to content
OpenAdvisories

Vendor

webpack-dev-server

6 known vulnerabilities.

Products

webpack-dev-server 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-112085

    webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

    webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the …

    webpack-dev-server webpack-dev-server node-webpack Ubuntu