Skip to content

Product

webpack.js webpack-dev-middleware vulnerabilities

1 published CVE affecting webpack.js webpack-dev-middleware, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest webpack.js webpack-dev-middleware CVEs

Newest publication first

  1. CVE-2024-29180 webpack-dev-middleware Path Traversal vulnerability

    Published
    HighCVSS 7.5

    Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can eithe...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.