webpack-dev-server

6 known vulnerabilities in webpack-dev-server, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-14631 CVSS 5.3 medium webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP…
  • CVE-2026-14620 CVSS 4.7 medium webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and…
  • CVE-2026-9595 CVSS 4.3 medium Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's…
  • CVE-2026-6402 CVSS 6.5 medium webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a…
  • CVE-2025-30360 CVSS 6.5 medium webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1…
  • CVE-2025-30359 CVSS 5.9 medium webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1…