OsVault/npm/webpack-dev-server
npm

webpack-dev-server

6 known vulnerabilities · 0 critical · 1 high

CVE-2025-30359

webpack-dev-server users' source code may be stolen when they access a malicious web site

Published Jun 4, 2025
CVE-2018-14732HIGH

Missing Origin Validation in webpack-dev-server

Published Jan 4, 2019
GHSA-79cf-xcqc-c78w

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

Published May 18, 2026
CVE-2025-30360

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

Published Jun 4, 2025
GHSA-mx8g-39q3-5c79

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

Published Jun 17, 2026
MAL-2023-1343

Malicious code in webpack-dev-server.legacy (npm)

Published May 1, 2023
Check your entire dependency tree at onceRun dependency scan →