webpack
npm
pkg:npm/webpack
20,953 Dependabot PRs
1 day ago
7,895 repositories
42 repositories
Security Advisories
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
Cross-realm object access in Webpack 5
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence
Recent PRs
chore(deps): bump the deps group across 1 directory with 21 updates
koekalenteri/koekalenteri #1343
Chore(deps): Bump the minor-and-patch group across 1 directory with 30 updates
stellar/freighter #2912
chore: Bump webpack from 5.108.3 to 5.108.4 in /examples/openfeature_web/webapp
thomaspoignant/go-feature-flag #5641
Bump webpack from 5.45.1 to 5.104.1 in the npm_and_yarn group across 1 directory
atomicassets/atomicmarket-sdk #3
build(deps): bump webpack from 5.107.2 to 5.108.4 in /kotlin-js-store
KotlinMania/rama-socks5-kotlin #32
Bump webpack from 5.107.2 to 5.108.4 in /kotlin-js-store
KotlinMania/tungstenite-kotlin #40
Bump webpack from 5.108.3 to 5.108.4
michaelwlu/portfolio #705
chore(deps): bump the patch-and-minor group across 1 directory with 6 updates
forbiddenlink/color-studio #33
chore(deps-dev): Bump webpack from 5.107.1 to 5.108.3 in /build/frontend-legacy
mamh-mixed/nextcloud-server #276
chore(deps-dev): bump webpack from 5.106.2 to 5.108.3
Ihorog/ciwiki #224
chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates
Update webpack requirement from ^5.107.2 to ^5.108.3
milankomaj/dev-badge #121
Bump the npm_and_yarn group across 1 directory with 21 updates
build(deps): bump webpack from 5.107.2 to 5.108.0
ministryofjustice/Claim-for-Crown-Court-Defence #9790
Bump webpack from 5.107.2 to 5.108.3 in /kotlin-js-store
Bump the dev-dependencies group with 11 updates
Bump the frontend group across 1 directory with 6 updates
stevejalim/bedrock #236
build(deps-dev): bump the npm-development group with 29 updates
nguyennhutien/csszyx #106
build(deps): bump the root-minor-patch group with 16 updates
Morphicai/harness-fe #192
Bump the npm_and_yarn group across 1 directory with 28 updates
Bump webpack from 5.74.0 to 5.108.3
ishaan-puniani/ahdjs #1205
chore(deps-dev): Bump webpack from 5.108.0 to 5.108.3 in /packages/frontend
unhappychoice/mdts #815
Bump webpack from 5.107.2 to 5.108.3 in /kotlin-js-store
KotlinMania/serial-test-kotlin #31
Bump webpack from 5.107.2 to 5.108.3 in /kotlin-js-store
KotlinMania/env-flags-kotlin #29
build(deps): bump webpack from 5.107.2 to 5.108.3 in /kotlin-js-store
KotlinMania/tokio-stream-kotlin #31
build(deps-dev): Bump the devdependencies group across 1 directory with 8 updates
FreeOCD/freeocd-vscode-extension #35
chore(deps-dev): bump webpack from 5.107.2 to 5.108.1 in /www
anweiss/cddl #612
chore(deps): bump webpack from 5.108.0 to 5.108.1
commercetools/nimbus #1691
chore(deps): bump the minor-and-patch group in /frontend with 7 updates
woowacourse-teams/2025-zzol #1508
chore(deps-dev): bump the webpack group with 2 updates
countgitmick/FreeTubePlusTabs #173
chore(deps-dev): bump webpack from 5.107.2 to 5.108.1
FrancoStino/github-contribution-card #57
Bump webpack from 5.107.2 to 5.108.0 in /dumper-companion
scummvm/scummvm-web #666
Bump webpack from 5.107.2 to 5.108.0
Vessel9817/discord-emote-onion-site #47
Bump webpack from 5.107.2 to 5.108.0
Basaingeal/Razor.Clipboard #2077
build(deps-dev): bump webpack from 5.107.2 to 5.108.0 in /diagram-engine-vscode
Sudhanshu-Ambastha/Ambastha-Diagrams #5
chore(deps-dev): bump webpack from 5.107.2 to 5.108.0
KaotoIO/vscode-kaoto #1437
Bump webpack from 5.107.2 to 5.108.0 in /kotlin-js-store
chore(deps-dev): bump the npm_and_yarn group across 34 directories with 4 updates
Bump the javascript group with 88 updates
shakacode/react-on-rails-demo-gumroad-rsc #49
Bump the npm_and_yarn group across 2 directories with 26 updates
batuhan-basoglu/Hospital-Management-System #128
chore(deps): bump the npm_and_yarn group across 5 directories with 17 updates
deps: Bump the workspace-dependencies group across 1 directory with 19 updates
theQRL/web3.js #89
Bump webpack from 5.94.0 to 5.107.2 in /test_apps/npm-with-external-babel-config
symfony/webpack-encore #1457
chore(deps-dev): bump the development-minor-patch group across 1 directory with 15 updates
openlayers/openlayers #17533
build(deps): bump the production group across 1 directory with 84 updates
webrecorder/browsertrix #3414
chore(deps): bump webpack from 5.76.2 to 5.107.2
dhis2/maps-app #3686
Bump the npm-dependencies group with 4 updates
dotnet-foundation/mod-dotnet-bot #402
Package Details
| Name: | webpack |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/webpack |
| JSON API: | View JSON |
Security Advisories
Package Information
Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.
| Repository: | https://github.com/webpack/webpack |
| Homepage: | https://github.com/webpack/webpack |
| Latest Release: |
5.99.9
about 1 year ago |
| Dependent Repos: | 3,177 |
| Dependent Packages: | 216,244 |
| Downloads: | 136,240,906 |
| Ranking: | Top 0.3868% by dependent repos Top 0.0129% by downloads Top 0.0002% by dependent pkgs |