Webpack.js / Webpack

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-68157	webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects	LOW	3.7	Feb 5, 2026
CVE-2025-68458	webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior	LOW	3.7	Feb 5, 2026
CVE-2024-43788	DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)	MEDIUM	6.1	Aug 27, 2024
CVE-2023-28154	webpack: avoid cross-realm objects	CRITICAL	9.8	Mar 13, 2023

Rows per page

Showing 1 to 4 of 4 CVEs