Webpack Webpack-Dev-Middleware
2 CVEs affecting Webpack Webpack-Dev-Middleware. Latest disclosed: 2026-08-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76844 | High | 7.4 | 2026-08-24 | zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it poi… |
CVE-2024-29180 | High | 7.4 | 2024-03-21 | Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficientl… |