CyberSecBulletin

Webpack-dev-server vulnerabilities

We track 1 vulnerability in Webpack-dev-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Webpack-dev-server vulnerabilities

  • 8.2 High severity

    webpack-dev-server: Origin Validation Error

    CVE-2026-112085Webpack-dev-server

    webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the p