webpack-dev-server has 1 CVE on record. The median CVSS is 5.3 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 5.3
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

Products

webpack-dev-server 1

Follow webpack-dev-server:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-9595Medium· 5.3webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies29

webpack-dev-server vulnerabilities

CVEs affecting webpack-dev-server, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-9595Medium· 5.3

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

▾ Sunlitwebpack-dev-server · webpack-dev-serverEPSS 0.16%via GHSA

webpack-dev-server vulnerabilities (CVEs) · VulnSea