web-infra-dev

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

web-infra-dev records in CISA KEV

No web-infra-dev vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-44225 CVE-2026-61782 · GHSA-jmg2-rcxh-w8q3

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

HIGH 72

Rsdoctor is a build analyzer tailored for projects built with Rspack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0043 Published 2026-09-24 Fixed in 1.5.16 CWE-200

TI-2026-42625 CVE-2026-59804 · GHSA-8rcx-4rjr-4wpf

Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket

HIGH 68

Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by o…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00308 Published 2026-07-08 Fixed CWE-1385

TI-2026-08888 CVE-2026-10144 · GHSA-x8vr-98rv-c92v

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

LOW 37

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS.

CVSS 4.0HIGH 7.1 Local No auth User interaction EPSS 0.0168 Published 2026-09-15 Fixed in 2.0.9 CWE-78

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0