Read the docs

webpack

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

webpack records in CISA KEV

No webpack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webpack-dev-server 9 records MEDIUM Webpack 4 records MEDIUM Loader-utils 3 records HIGH Webpack-dev-middleware 1 record HIGH

Records

1 record in Webpack-dev-middleware · all components

TI-2024-19349 CVE-2024-29180 · GHSA-wr3j-pwj9-hqq6

webpack-dev-middleware Path Traversal vulnerability

Priority HIGH 66

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2024-03-21 Partial fix · 7.1.0, 6.1.2 +1 CWE-22
Open these records in search →