WE
Product
Webpack-dev-server
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Webpack-dev-server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6402 | 6.5 | May 12 | webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins Affected: before 5.2.4 |
| CVE-2025-30360 | 6.5 | Jun 3 | webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser Affected: before 5.2.1 |
| CVE-2025-30359 | 5.9 | Jun 3 | webpack-dev-server users' source code may be stolen when they access a malicious web site Affected: before 5.2.1 |
| CVE-2026-14631 | 5.3 | Jul 3 | webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header Affected: before 5.2.6 |
| CVE-2026-14620 | 4.7 | Jul 3 | webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints Affected: before 5.2.6 |
| CVE-2026-9595 | 4.3 | Jun 15 | webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies Affected: before 5.2.5 |
Showing 6