WE
Vendor
webpack-dev-server
6
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114348 | WE webpack-dev-server webpack-dev-server | 5.3 | Oct 22 | webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint |
| CVE-2026-112085 | WE webpack-dev-server webpack-dev-server | 8.2 | Oct 22 | webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades |
| CVE-2026-14631 | WE webpack-dev-server webpack-dev-server | 5.3 | Jul 3 | webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header |
| CVE-2026-14620 | WE webpack-dev-server webpack-dev-server | 4.7 | Jul 3 | webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints |
| CVE-2026-9595 | WE webpack-dev-server webpack-dev-server | 4.3 | Jun 15 | webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies |
| CVE-2026-6402 | WE webpack-dev-server webpack-dev-server | 6.5 | May 12 | webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins |