web-infra-dev

Products

Product	CVEs	Exploited	Latest
midscene	1	–	Jul 8, 2026
rsbuild	1	–	Sep 15, 2026
rsdoctor	1	–	Sep 24, 2026

CVE-2026-61782 High 7.5 @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata 0.4%
CVE-2026-10144 High 7.8 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling 1.7%
CVE-2026-59804 Medium 6.8 Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket 0.3%