Webpack.js

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 18
    Known Exploited: 0
    2
    Critical Level Threats
    6
    High Level Threats
    8
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-114348

    webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-112085

    webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-76844

    zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write

    Last Modified: Oct 01, 2026
    Published: Aug 24, 2026

    CVE-2026-14631

    webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

    Last Modified: Jul 29, 2026
    Published: Jul 03, 2026

    CVE-2026-14620

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    Last Modified: Jul 29, 2026
    Published: Jul 03, 2026
    Items Per Page
    Webpack.js Vulnerabilities & Security CVEs | CVE-DB