Wwebpack-dev-server

Products

Exploited and recent CVEs

• CVE-2026-114348 Medium 5.3 webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint 0.3%
• CVE-2026-112085 High 8.2 webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades 0.1%
• CVE-2026-14631 Medium 5.3 webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header 0.5%
• CVE-2026-14620 Medium 4.7 webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints 0.5%
• CVE-2026-9595 Medium 5.3 webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies 0.2%
• CVE-2026-6402 Medium 5.3 webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins 0.3%