WE
Product
webpack-dev-server
by webpack-dev-server · last CVE Oct 22, 2026
6
CVEs
0
On KEV
8.2
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch

Add webpack-dev-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112085
8.2
0%
Oct 22
webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades
Affected: before 5.2.7; 6.0.0 before 6.1.0
Showing 1