WE
Vendor
webpack
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-68157 | WE webpack webpack | 3.7 | Feb 5 | webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects |
| CVE-2025-68458 | WE webpack webpack | 3.7 | Feb 5 | webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior |
| CVE-2025-30360 | WE webpack-dev-server webpack | 6.5 | Jun 3 | webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser |
| CVE-2025-30359 | WE webpack-dev-server webpack | 5.9 | Jun 3 | webpack-dev-server users' source code may be stolen when they access a malicious web site |