Webpack-Dev-Server

2 CVEs across 1 Webpack-Dev-Server products. Browse Webpack-Dev-Server vulnerabilities, severities, and proof-of-concept exploits.

Webpack-Dev-Server products with known CVEs

ProductCVEs
Webpack-Dev-Server4
Webpack-Dev-Server CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-14631Medium5.32026-07-03webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malfor…
CVE-2026-14620Medium4.72026-07-03webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that…
CVE-2026-9595Medium5.32026-06-15Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws: true, it also intercepts the dev server's own HMR WebSocket and…
CVE-2026-6402Medium5.32026-05-12webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentially trustworthy origi…