Known vulnerabilities in webpack-dev-server
Vendor:
webpack
Software:
webpack-dev-server
Software CPE:
cpe:2.3:a:webpack:webpack-dev-server:*:*:*:*:*:*:*:*
Website:
https://webpack.js.org/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
6.0.0
5.2.6
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.0
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.15.2
4.15.1
4.15.0
4.14.0
4.13.3
4.13.2
4.13.1
4.13.0
4.12.0
4.11.1
4.11.0
4.10.1
4.10.0
4.9.3
4.9.2
4.9.1
4.9.0
4.8.1
4.8.0
4.7.4
4.7.3
4.7.2
4.7.1
4.7.0
4.6.0
4.5.0
4.4.0
4.3.1
4.3.0
4.2.1
4.2.0
4.1.1
4.1.0
4.0.0
3.11.3
3.11.2
3.11.1
3.11.0
3.10.3
3.10.2
3.10.1
3.10.0
3.9.0
3.8.2
3.8.1
3.8.0
3.7.2
3.7.1
3.7.0
3.6.0
3.5.1
3.5.0
3.4.1
3.4.0
3.3.1
3.3.0
3.2.1
3.2.0
3.1.14
3.1.13
3.1.12
3.1.11
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.0
2.11.3
2.11.2
2.11.1
2.11.0
2.10.1
2.10.0
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.2
2.9.1
2.9.0
2.8.2
2.8.1
2.8.0
2.7.1
2.7.0
2.6.1
2.6.0
2.5.1
2.5.0
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.0
2.2.1
2.2.0
1.16.5
1.16.4
1.16.3
1.16.2
1.16.1
1.16.0
1.15.2
1.15.1
1.15.0
1.14.1
1.14.0
1.13.0
1.12.1
1.12.0
1.11.0
1.10.1
1.10.0
1.9.0
1.8.2
1.8.1
1.8.0
1.7.0
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137027 - Cross-Site Request Forgery (CSRF) CVE-2026-14620 |
CWE-352 | Medium | 5.2.6 | 07.07.2026 |
SB2026070766 |
||
| #VU137026 - Improper input validation CVE-2026-14631 |
CWE-20 | Medium | 5.2.6 | 07.07.2026 |
SB2026070766 |
||
| #VU134578 - Origin Validation Error CVE-2026-9595 |
CWE-346 | Medium | 5.2.5 | 16.06.2026 |
SB2026061603 SB20260720384 SB2026072237 and 1 more |
||
| #VU131133 - Exposed Dangerous Method or Function CVE-2026-6402 |
CWE-749 | Medium | 5.2.4 | 12.05.2026 |
SB2026051243 |
||
| #VU112135 - Exposed Dangerous Method or Function CVE-2025-30359 |
CWE-749 | Low | 5.2.1 | 03.07.2025 |
SB2025070317 SB2025122323 SB2026010825 and 1 more |
||
| #VU112134 - Origin Validation Error CVE-2025-30360 |
CWE-346 | Low | 5.2.1 | 03.07.2025 |
SB2025070317 SB2025122323 SB2025122948 and 2 more |
||
| #VU109924 - Missing Origin Validation in WebSockets CVE-2018-14732 |
CWE-1385 | Medium | 3.1.6 | 29.05.2025 |
SB2018092126 SB2025122323 SB2025122948 and 2 more |