Webpack
6 CVEs across 3 Webpack products. Browse Webpack vulnerabilities, severities, and proof-of-concept exploits.
Webpack products with known CVEs
Webpack CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-68458 | Low | 3.7 | 2026-02-05 | Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) can be by… |
CVE-2025-68157 | Low | 3.7 | 2026-02-05 | Webpack is a module bundler. From version 5.49.0 to before 5.104.0, when experiments.buildHttp is enabled, webpack’s HTTP(S) resolver (HttpUriPlugin) enforces… |
CVE-2025-30360 | Medium | 6.5 | 2025-06-03 | webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source… |
CVE-2025-30359 | Medium | 5.3 | 2025-06-03 | webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source… |
CVE-2024-43788 | Medium | 6.4 | 2024-08-27 | Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packag… |
CVE-2024-29180 | High | 7.4 | 2024-03-21 | Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficientl… |