`webpack-dev-server`

Ecosystem:
npm

Package URL:
pkg:npm/webpack-dev-server

Total PRs:
9,748 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
7,920 repositories

Unique Repos (30 days):
149 repositories

Security Advisories

webpack-dev-server users' source code may be stolen when they access a malicious web site

GHSA-4v9v-hfq4-rm2v CVE-2025-30359 MODERATE published 12 months ago • updated 12 days ago

### Summary Source code may be stolen when you access a malicious web site. ### Details Because the request for classic script by a script tag is ...

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

GHSA-79cf-xcqc-c78w CVE-2026-6402 MODERATE published 17 days ago • updated 12 days ago

### Impact When webpack-dev-server is running on a non-HTTPS origin (the default), cross-origin requests from malicious websites can load the dev ...

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

GHSA-9jgg-88mc-972h CVE-2025-30360 MODERATE published 12 months ago • updated 12 days ago

### Summary Source code may be stolen when you access a malicious web site with non-Chromium based browser. ### Details The `Origin` header is che...

4.15.1 → 4.15.2 Patch PR

Closed 2 days ago 1 comment

Bump the patch-and-minor group across 1 directory with 24 updates

navikt/k9-los-web #4268

5.2.3 → 5.2.4 Patch PR

Closed 5 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

alexcolls/p2p-wallet-web #31

5.2.1 → 5.2.4 Patch PR

Closed 5 days ago 1 comment

Bump the npm_and_yarn group across 12 directories with 14 updates

AnnaProDev/fork-commit-merge #47

4.15.1 → 5.2.3 Major PR

Closed 6 days ago 1 comment

build(deps-dev): bump webpack-dev-server from 4.7.4 to 5.2.4

RabbyHub/Rabby #3771

4.7.4 → 5.2.4 Major PR

Closed 6 days ago 2 comments

Bump the npm_and_yarn group across 68 directories with 4 updates

dporkka/platform #31

4.15.2 → 5.2.4 Major PR

Closed 6 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 9 updates

pdragy/trillium #129

5.2.2 → 5.2.4 Patch PR

Closed 7 days ago 1 comment

Bump the npm_and_yarn group across 13 directories with 9 updates

Gaming-tech-cyber/react #28

4.15.0 → 5.2.4 Major PR

Closed 7 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 28 updates

stevewithington/daytona #2

5.2.2 → 5.2.4 Patch PR

Closed 7 days ago 1 comment

Bump the npm_and_yarn group across 5 directories with 25 updates

imagelessthought/overleaf #32

5.2.1 → 5.2.4 Patch PR

Closed 8 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

ptarmiganlabs/help-button.qs #147

5.2.3 → 5.2.4 Patch PR

Closed 8 days ago 1 comment

Bump the minor-versions group across 1 directory with 14 updates

nienow/sn-extension-template #146

5.2.3 → 5.2.4 Patch PR

Closed 9 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

oaqoe-DWQ/TeamVision #1

2.11.3 → 5.2.4 Major PR

Closed 10 days ago 1 comment

Bump the npm_and_yarn group across 24 directories with 13 updates

bluluvinn/react #28

4.15.0 → 5.2.4 Major PR

Closed 10 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 13 updates

nosportugal/codesandbox-client #19

3.3.1 → 5.2.4 Major PR

Closed 10 days ago 1 comment

Bump webpack-dev-server from 3.1.11 to 5.2.4

pdhorn/webpack-config-from-scratch #28

3.1.11 → 5.2.4 Major PR

Closed 10 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 18 updates

CptnFizzbin/backstage #53

5.2.2 → 5.2.4 Patch PR

Closed 11 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 16 updates

conor-spec/goose #17

5.2.2 → 5.2.4 Patch PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 12 updates

alexis-opolka/standardnote-app #40

4.15.1 → 5.2.4 Major PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 16 updates

lawgimenez/omnivore #6

4.15.2 → 5.2.4 Major PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

Vaquum/Limen #545

5.2.3 → 5.2.4 Patch PR

Closed 12 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

vinnub143/QuarterBack_BackStage_Sec_Testing #55

5.2.2 → 5.2.4 Patch PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates

dporkka/mastra #35

5.2.2 → 5.2.4 Patch PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 18 updates

vinnub143/QuarterBack_BackStage_Sec_Testing #54

5.2.2 → 5.2.4 Patch PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 16 directories with 4 updates

Jackblanket847/cypress #222

5.1.0 → 5.2.4 Minor PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 27 updates

kinghua0629/chromium #11

4.11.1 → 5.2.4 Major PR

Closed 12 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 27 directories with 6 updates

Jackblanket847/cypress #219

5.1.0 → 5.2.4 Minor PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 17 directories with 13 updates

chien110234/react #53

4.15.0 → 5.2.4 Major PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 12 directories with 11 updates

adamoutler/joplin #25

5.2.2 → 5.2.4 Patch PR

Closed 12 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 15 updates

conor-spec/goose #15

5.2.2 → 4.15.2 Minor PR

Closed 13 days ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 12 updates

thetigerone888/openai-node #16

4.15.2 → 5.2.4 Major PR

Closed 13 days ago 1 comment

Bump the npm_and_yarn group across 15 directories with 24 updates

1042422227/react #9

4.15.0 → 5.2.4 Major PR

Closed 13 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

TonyKenPs/Landscape-Design-Project-Management #124

4.9.2 → 4.15.2 Minor PR

Closed 13 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

crowdin/ota-client-js #141

4.15.2 → 5.2.4 Major PR

Closed 13 days ago 1 comment

Bump the npm_and_yarn group across 11 directories with 7 updates

Mass-Reports/firebase-framework-tools #77

4.15.1 → 5.2.3 Major PR

Closed 13 days ago 1 comment

Bump the patch-and-minor group across 1 directory with 21 updates

navikt/k9-los-web #4259

5.2.3 → 5.2.4 Patch PR

Closed 13 days ago 1 comment

Bump the npm_and_yarn group across 9 directories with 18 updates

HarleyCoops/joplin #14

5.2.1 → 5.2.4 Patch PR

Closed 13 days ago 3 comments

Bump the minor-versions group across 1 directory with 11 updates

r0wanb3zy/template #8

5.2.3 → 5.2.4 Patch PR

Closed 14 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

Ensono/amido.github.io #613

5.2.3 → 5.2.4 Patch PR

Closed 15 days ago 2 comments

chore(deps): bump webpack-dev-server and @rspack/cli

knightedcodemonkey/css #88

removed Removal PR

Closed 15 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

8hobbies/material-ui-autonumeric #337

5.2.2 → 5.2.4 Patch PR

Closed 15 days ago 1 comment

chore(deps): bump webpack-dev-server from 5.2.2 to 5.2.4 in /docs

digital-codes/superset #509

5.2.2 → 5.2.4 Patch PR

Closed 15 days ago 1 comment

Bump webpack-dev-server from 5.2.2 to 5.2.4 in /hphp/hack/website

facebook/hhvm #9780

5.2.2 → 5.2.4 Patch PR

Closed 15 days ago 2 comments

chore(deps-dev): bump webpack-dev-server from 5.2.1 to 5.2.4 in /ecosystem-tests/ts-browser-webpack in the npm_and_yarn group across 1 directory

GlacierEQ/openai-node #41

5.2.1 → 5.2.4 Patch PR

Closed 15 days ago 4 comments

Bump webpack-dev-server from 5.2.2 to 5.2.4

geomoose/gm3 #983

5.2.2 → 5.2.4 Patch PR

Closed 15 days ago 1 comment

build(deps-dev): bump webpack-dev-server from 5.2.1 to 5.2.4

iFixit/pulldasher #452

5.2.1 → 5.2.4 Patch PR

Closed 15 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 26 directories with 5 updates

Jackblanket847/cypress #215

5.1.0 → 5.2.4 Minor PR

Closed 15 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 7 updates

RainbowScientist5/codesandbox-Rainbowscientist-client #50

3.3.1 → 5.2.4 Major PR

Closed 15 days ago 1 comment

Bump webpack-dev-server from 2.11.5 to 5.2.4 in the npm_and_yarn group across 1 directory

Woosmap/woosmap-baidu-locator #1

2.11.5 → 5.2.4 Major PR

Closed 15 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 3 updates

OfficeDev/Microsoft-Teams-Samples #2260

4.13.1 → 5.2.4 Major PR

Closed 15 days ago 1 comment

Package Details

Name:	`webpack-dev-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/webpack-dev-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 1

MODERATE 3

View All npm Advisories

Package Information

Description:

Serves a webpack app. Updates the browser on changes.

Repository:	https://github.com/webpack/webpack-dev-server
Homepage:	https://github.com/webpack/webpack-dev-server#readme
Latest Release:	`5.2.2` about 1 year ago
Dependent Repos:	2,955,806
Dependent Packages:	90,823
Downloads:	63,904,191
Ranking:	Top 0.006% by dependent repos Top 0.0326% by downloads Top 0.001% by dependent pkgs

PR Status

Open 6,067 (62.3%)

Merged 1,268 (13.0%)

Closed 1,750 (18.0%)

PR Types

Major 4,982 (51.1%)

Minor 1,142 (11.7%)

Patch 2,038 (20.9%)

Removal 126 (1.3%)

webpack-dev-server

Security Advisories

webpack-dev-server users' source code may be stolen when they access a malicious web site

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

Missing Origin Validation in webpack-dev-server

Recent PRs (filtered by: Closed )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`webpack-dev-server`