webpack

Products

Exploited and recent CVEs

• CVE-2025-68157 Low 3.7 webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects 0.2%
• CVE-2025-68458 Low 3.7 webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior 0.2%
• CVE-2025-30360 Medium 6.5 webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser 0.4%
• CVE-2025-30359 Medium 5.3 webpack-dev-server users' source code may be stolen when they access a malicious web site 0.6%
• CVE-2024-43788 Medium 6.4 DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS) 1.0%
• CVE-2024-29180 High 7.4 webpack-dev-middleware Path Traversal vulnerability 1.2%