`webpack-dev-server`

Ecosystem:
npm

Package URL:
pkg:npm/webpack-dev-server

Total PRs:
9,749 Dependabot PRs

Latest PR:
about 6 hours ago

Unique Repositories:
7,920 repositories

Unique Repos (30 days):
150 repositories

Security Advisories

webpack-dev-server users' source code may be stolen when they access a malicious web site

GHSA-4v9v-hfq4-rm2v CVE-2025-30359 MODERATE published 12 months ago • updated 12 days ago

### Summary Source code may be stolen when you access a malicious web site. ### Details Because the request for classic script by a script tag is ...

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

GHSA-79cf-xcqc-c78w CVE-2026-6402 MODERATE published 17 days ago • updated 12 days ago

### Impact When webpack-dev-server is running on a non-HTTPS origin (the default), cross-origin requests from malicious websites can load the dev ...

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

GHSA-9jgg-88mc-972h CVE-2025-30360 MODERATE published 12 months ago • updated 12 days ago

### Summary Source code may be stolen when you access a malicious web site with non-Chromium based browser. ### Details The `Origin` header is che...

removed Removal PR

Closed 15 days ago 2 comments

build(deps): bump webpack-dev-server and @rspack/cli in /shell-ui

scality/metalk8s #4943

removed Removal PR

Open 15 days ago 2 comments

Bump webpack-dev-server and @angular/cli in /pact/pact-angular

gengle/code-examples #231

removed Removal PR

Open 15 days ago 1 comment

Bump webpack-dev-server and @symfony/webpack-encore in /docs/app

manala/manala-recipes #539

removed Removal PR

Open 6 months ago 1 comment

Bump webpack-dev-server and @symfony/webpack-encore

rrone/crs #70

removed Removal PR

Closed 7 months ago 1 comment

build(deps): bump webpack-dev-server and @symfony/webpack-encore

Noelierx/GameHer #206

removed Removal PR

Open 7 months ago 1 comment

chore(deps): bump webpack-dev-server and @docusaurus/preset-classic

wowlink/wow-docs #258

removed Removal PR

Open 8 months ago

build(deps): bump webpack-dev-server and @symfony/webpack-encore

AlexVWeb/geopatrimoines #71

removed Removal PR

Open 9 months ago

Bump webpack-dev-server and @symfony/webpack-encore

sonata-project/form-extensions #549

removed Removal PR

Open 9 months ago 1 comment

Bump webpack-dev-server and @symfony/webpack-encore

rafaelbernard/anicely-tech-exercise #3

removed Removal PR

Open 9 months ago

Bump webpack-dev-server and @symfony/webpack-encore

sonata-project/SonataAdminBundle #8320

removed Removal PR

Merged 9 months ago 2 comments

Bump webpack-dev-server and @symfony/webpack-encore

pkshetlie/RagnaCustoms #165

removed Removal PR

Open 10 months ago

Bump webpack-dev-server and gatsby

rtre84/test-sn-template-feature #37

removed Removal PR

Open 10 months ago

Bump webpack-dev-server and @angular/cli

facetrollex/medical-service-app #16

removed Removal PR

Open 10 months ago

Bump webpack-dev-server and @symfony/webpack-encore in /src/CoreShop/Bundle/FrontendBundle/Resources/assets

coreshop/CoreShop #2887

removed Removal PR

Open 11 months ago 2 comments

chore(deps): bump webpack-dev-server and @angular/cli

sithuhlaing/Angular-ng5 #19

removed Removal PR

Open 11 months ago

Bump webpack-dev-server and gatsby

UBC-MDS/programming-in-python-for-data-science #91

removed Removal PR

Closed 11 months ago

Bump webpack-dev-server and @symfony/webpack-encore

counteraccro/natheo #86

removed Removal PR

Merged 12 months ago

Bump webpack-dev-server and gatsby

eyeszik/isb #6

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular-devkit/build-angular

katereggaAlex/iDeliver #5

removed Removal PR

Closed 12 months ago 1 comment

Bump webpack-dev-server and @angular/cli in /Chapter01/FirstProject

takeo-asai/LearningAngularSecondEdition_Code #30

removed Removal PR

Merged 12 months ago

Bump webpack-dev-server and @angular/cli in /Chapter12/AnimationsDemo

takeo-asai/LearningAngularSecondEdition_Code #28

removed Removal PR

Merged 12 months ago

Bump webpack-dev-server and gatsby

Isisphinx/Gatsby-Mui-Typescript #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

fola312/312fola #2

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

burdier/burdier.blog #4

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli in /O-Kart

Aryan-Dixit/Organic-Kart #31

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli

mukundshandilya/angular2 #7

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli

juli0mendes/meat-app-starter #8

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli

imkartikahuja/onsite-judge #16

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

AltinVitija/Shiny-sun #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli in /17mob-react-native

NitramTasu/17mob-react-native #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

Rafazor/project1 #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

donaldisufi/Shiny-sun #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

tkmzz/reactNativeClass #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and umi

zzz4158/dongmanjia #1

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

ykttl/demo-react-native #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

dorfo1/ReactNativeAula #2

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and expo-cli

LeAlbus/ReactNativeClass #3

removed Removal PR

Open 12 months ago

build(deps): bump webpack-dev-server and umi in /pollsApp

jerry81/PollSite #1

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and umi

SmartSemon/USCQMSWEB #24

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and umi

jerry81/HybridDva #1

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and umi

shiweishiwei/umi-dva-antd- #1

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli in /src/SampleApps/SampleApp.Angular/ClientApp

hixio-mh/Simplify.Web #91

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and @angular/cli

wemoon1/soundcamp #23

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

Isisphinx/isis.care #3

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

Alfyi/gatsby-starter-netlify-cms #2

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and vuepress

eduardcotmrf/my-vuepress #2

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

bshrram/myBlog #2

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby

samponeill/spo-design #1

removed Removal PR

Open 12 months ago

Bump webpack-dev-server and gatsby in /gatsby-mdx-blog-project-master

milan-josipovic/trening-za-dotNET #2

removed Removal PR

Open 12 months ago

Package Details

Name:	`webpack-dev-server`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/webpack-dev-server`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 1

MODERATE 3

View All npm Advisories

Package Information

Description:

Serves a webpack app. Updates the browser on changes.

Repository:	https://github.com/webpack/webpack-dev-server
Homepage:	https://github.com/webpack/webpack-dev-server#readme
Latest Release:	`5.2.2` about 1 year ago
Dependent Repos:	2,955,806
Dependent Packages:	90,823
Downloads:	63,904,191
Ranking:	Top 0.006% by dependent repos Top 0.0326% by downloads Top 0.001% by dependent pkgs

PR Status

Open 6,069 (62.3%)

Merged 1,268 (13.0%)

Closed 1,750 (18.0%)

PR Types

Major 4,983 (51.1%)

Minor 1,142 (11.7%)

Patch 2,039 (20.9%)

Removal 126 (1.3%)

webpack-dev-server

Security Advisories

webpack-dev-server users' source code may be stolen when they access a malicious web site

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

Missing Origin Validation in webpack-dev-server

Recent PRs (filtered by: Removal PRs )

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`webpack-dev-server`