Login Request a demo
WE
Product
Webpack-dev-server
by Webpack.js · last CVE Oct 22, 2026
9
CVEs
0
On KEV
8.2
Max CVSS
2
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 2Medium 7Low 0
Severity
All severities9Critical0High2Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webpack-dev-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112085
8.2
0%
Oct 22
webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades
Affected: before 5.2.7; 6.0.0 before 6.1.0
CVE-2018-14732
7.5
2%
Sep 21
An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6
Affected: before 3.1.6
Showing 2