An open index of dependabot pull requests across open source projects.

webpack-dev-server

Ecosystem:
npm
Package URL:
pkg:npm/webpack-dev-server
Total PRs:
9,879 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
8,002 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
GHSA-m28w-2pqf-7qgj CVE-2026-14631 MODERATE published 4 days ago • updated 3 days ago
### Impact An unauthenticated peer that can reach the `webpack-dev-server` process can terminate it by sending either a normal HTTP request with a...
webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
GHSA-f5vj-f2hx-8m93 CVE-2026-14620 MODERATE published 4 days ago • updated 3 days ago
### Impact The internal `/webpack-dev-server/open-editor` and `/webpack-dev-server/invalidate` endpoints perform state-changing actions on any `GE...
webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins
GHSA-79cf-xcqc-c78w CVE-2026-6402 MODERATE published 2 months ago • updated about 1 month ago
### Impact When webpack-dev-server is running on a non-HTTPS origin (the default), cross-origin requests from malicious websites can load the dev ...
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser
GHSA-9jgg-88mc-972h CVE-2025-30360 MODERATE published about 1 year ago • updated 11 days ago
### Summary Source code may be stolen when you access a malicious web site with non-Chromium based browser. ### Details The `Origin` header is che...
webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
GHSA-mx8g-39q3-5c79 CVE-2026-9595 MODERATE published about 1 month ago • updated about 1 month ago
### Impact When a user-configured proxy on `webpack-dev-server` has a broad context (e.g. `/`) and `ws: true`, it also intercepts the dev server's...
Recent PRs
Package Details
Name: webpack-dev-server
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/webpack-dev-server
JSON API: View JSON
Security Advisories

7

Active advisories
HIGH 1
MODERATE 6
View All npm Advisories
Package Information
Description:

Serves a webpack app. Updates the browser on changes.

Repository: https://github.com/webpack/webpack-dev-server
Homepage: https://github.com/webpack/webpack-dev-server#readme
Latest Release: 5.2.2
about 1 year ago
Dependent Repos: 2,955,806
Dependent Packages: 90,823
Downloads: 63,904,191
Ranking: Top 0.006% by dependent repos Top 0.0326% by downloads Top 0.001% by dependent pkgs
PR Status
Open 6,122 (62.0%)
Merged 1,268 (12.8%)
Closed 1,828 (18.5%)
PR Types
Major 5,037 (51.0%)
Minor 1,151 (11.7%)
Patch 2,107 (21.3%)
Removal 126 (1.3%)