Skip to content
OpenAdvisories

Vendor

webpack

6 known vulnerabilities.

Products

webpack 3 webpack-dev-server 2 webpack-dev-middleware 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-30360

    webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

    webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when you access a malicious web site with non-Chromium based browser. The `Origi…

    webpack webpack-dev-server webpack-dev-server npm
  • Medium 5.3
    CVE-2025-30359

    webpack-dev-server users' source code may be stolen when they access a malicious web site

    webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by…

    webpack webpack-dev-server webpack-dev-server npm
  • Medium 6.4
    CVE-2024-43788 Public exploit

    DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)

    Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulner…

    webpack webpack node-webpack webpack Debian Ubuntu npm