Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

webpack

npm

Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.

View on github.com · View on npmjs.org

Security Advisories for webpack in npm

Low
4 months ago

webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior GSA_kwCzR0hTQS04ZmdjLTdjYzYtcng3eM4ABR_8

npm webpack
Low
4 months ago

webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence GSA_kwCzR0hTQS0zOHI3LTc5NGgtNTc1OM4ABR_7

npm webpack
Moderate
almost 2 years ago

Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS GSA_kwCzR0hTQS00dnZqLTRjcHItcDk4Ns4AA--k

npm webpack
Critical
about 3 years ago

Cross-realm object access in Webpack 5 GSA_kwCzR0hTQS1oYzZxLTJtcHAtcXc3as4AAyD3

npm webpack

Filter by Severity

Low 2 Moderate 1 Critical 1