WE
Product
webpack
by webpack · last CVE Feb 5, 2026
3
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 2
Watch

Add webpack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43788
6.1
1%
Aug 27
DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)
Affected: >= 5.0.0-alpha.0, < 5.94.0
Showing 1