pkg:npm/webpack-dev-server

All known vulnerabilities

• HIGH7.5CVE-2018-14732Missing Origin Validation in webpack-dev-server
  from 0, < 3.1.11
• MEDIUM6.5CVE-2025-30360webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
  from 0, < 5.2.1
• MEDIUM5.3CVE-2026-14631webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
  from 0, < 5.2.6
• MEDIUM5.3webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
  from 0, < 5.2.5
• MEDIUM5.3webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins
  from 0, < 5.2.4
• MEDIUM5.3webpack-dev-server users' source code may be stolen when they access a malicious web site
  from 0, < 5.2.1
• MEDIUM4.7webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
  from 0, < 5.2.6