İçeriğe atla
Noroxi

webpack.js kayıtları

webpack.js üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2022-37601
    40Planlayın

    Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js.

    KritikCVSS 9,8İstismar yokEPSS %3

    webpack.js · loader-utils12 Eki 2022

  • CVE-2023-28154
    39İzleyin

    Webpack 5 before 5.76.0 does not avoid cross-realm object access.

    KritikCVSS 9,8İstismar yokEPSS %1

    webpack.js · webpack12 Mar 2023

  • CVE-2018-14732
    31İzleyin

    An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6.

    YüksekCVSS 7,5İstismar yokEPSS %3

    webpack.js · webpack-dev-server21 Eyl 2018

  • CVE-2022-37599
    31İzleyin

    A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.

    YüksekCVSS 7,5İstismar yokEPSS %2

    webpack.js · loader-utils11 Eki 2022

  • CVE-2022-37603
    31İzleyin

    A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.

    YüksekCVSS 7,5İstismar yokEPSS %2

    webpack.js · loader-utils14 Eki 2022

  • CVE-2024-29180
    30İzleyin

    webpack-dev-middleware Path Traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %1

    webpack.js · webpack-dev-middleware21 Mar 2024

  • CVE-2026-6402
    26İzleyin

    webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

    OrtaCVSS 6,5İstismar yokEPSS %0

    webpack.js · webpack-dev-server12 May 2026

  • CVE-2025-30360
    26İzleyin

    webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

    OrtaCVSS 6,5İstismar yokEPSS %0

    webpack.js · webpack-dev-server3 Haz 2025

  • CVE-2024-43788
    24İzleyin

    DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    webpack.js · webpack27 Ağu 2024

  • CVE-2025-30359
    23İzleyin

    webpack-dev-server users' source code may be stolen when they access a malicious web site

    OrtaCVSS 5,9İstismar yokEPSS %1

    webpack.js · webpack-dev-server3 Haz 2025

  • CVE-2026-14631
    21İzleyin

    webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

    OrtaCVSS 5,3İstismar yokEPSS %1

    webpack.js · webpack-dev-server3 Tem 2026

  • CVE-2026-14620
    18İzleyin

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    webpack.js · webpack-dev-server3 Tem 2026

  • CVE-2026-9595
    17İzleyin

    webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

    OrtaCVSS 4,3İstismar yokEPSS %0

    webpack.js · webpack-dev-server15 Haz 2026

  • CVE-2025-68458
    14İzleyin

    webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

    DüşükCVSS 3,7İstismar yokEPSS %0

    webpack.js · webpack5 Şub 2026

  • CVE-2025-68157
    14İzleyin

    webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects

    DüşükCVSS 3,7İstismar yokEPSS %0

    webpack.js · webpack5 Şub 2026