Skip to content
OpenAdvisories

Product · webpack

webpack-dev-middleware

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2024-29180

    webpack-dev-middleware Path Traversal vulnerability

    Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The…

    webpack webpack-dev-middleware webpack-dev-middleware npm