rspack vulnerabilities

Products

• @rspack/core 1

Latest rspack CVEs

Newest publication first

1. GHSA-84jw-g43v-8gjm DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS

   Published 2024-09-19

   Medium·CVSS 6.3

   Hi, Rspack|Webpack developer team! Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g.,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.