webpack
npm
pkg:npm/webpack
20,953 Dependabot PRs
1 day ago
7,895 repositories
42 repositories
Security Advisories
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
Cross-realm object access in Webpack 5
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence
Recent PRs (filtered by: Patch PRs )
chore(deps): bump the deps group across 1 directory with 21 updates
koekalenteri/koekalenteri #1343
chore: Bump webpack from 5.108.3 to 5.108.4 in /examples/openfeature_web/webapp
thomaspoignant/go-feature-flag #5641
Bump webpack from 5.108.3 to 5.108.4
michaelwlu/portfolio #705
chore(deps-dev): Bump webpack from 5.108.0 to 5.108.3 in /packages/frontend
unhappychoice/mdts #815
chore(deps): bump webpack from 5.108.0 to 5.108.1
commercetools/nimbus #1691
deps: Bump the workspace-dependencies group across 1 directory with 19 updates
theQRL/web3.js #89
chore(deps): update webpack requirement from ^5.107.1 to ^5.107.2 in /packages/bananass
lumirlumir/npm-bananass #1056
chore(deps-dev): bump webpack from 5.107.1 to 5.107.2 in /webapp
robfrank/linklift #883
deps: Bump the workspace-dependencies group across 1 directory with 11 updates
theQRL/web3.js #82
Chore(deps): bump the patch-and-minor group across 1 directory with 20 updates
navikt/k9-punsj-frontend #3694
chore: Bump webpack from 5.107.1 to 5.107.2 in /examples/openfeature_web/webapp
thomaspoignant/go-feature-flag #5377
Bump the build group with 8 updates
nhsuk/nhsuk-service-manual #2561
chore: Bump the minor-and-patch group with 3 updates
aragon/app #1166
Bump the dev-dependencies group with 3 updates
chore(deps-dev): bump the npm-development group with 6 updates
chore: bump the development-dependencies group with 10 updates
streetsidesoftware/cspell #8864
build(deps): bump the actions-deps group across 1 directory with 18 updates
ardatan/graphql-tools #8206
chore: bump the development-dependencies group across 1 directory with 18 updates
streetsidesoftware/vscode-spell-checker #5292
build(deps-dev): bump webpack from 5.107.1 to 5.107.2
bervProject/my-personal-web-react #2040
Bump webpack from 5.107.1 to 5.107.2
infinite-kube/Dependabot-Auto-Merge-Pipeline-Demo #545
Bump the minor group across 1 directory with 7 updates
ministryofjustice/hmpps-manage-people-on-probation-ui #1492
NPM Dev(deps-dev): Bump webpack from 5.107.1 to 5.107.2
newfold-labs/wp-module-next-steps #355
npm: bump webpack from 5.107.1 to 5.107.2
chore(deps-dev): bump webpack from 5.107.1 to 5.107.2
bbeesley/gha-auto-dependabot-rebase #1358
Bump webpack from 5.107.0 to 5.107.2
LindseyB/sturdy-engine #2638
Bump webpack from 5.107.0 to 5.107.1
quentinlao/reactTemplate #1562
chore: bump webpack from 5.107.0 to 5.107.1
Resources-VictorIrix/ant-design #4084
NPM Dev(deps-dev): Bump webpack from 5.107.0 to 5.107.1
newfold-labs/wp-module-next-steps #354
chore (deps): bump the patch-updates group across 1 directory with 12 updates
vooltgrouplimited2-svg/CyberChef #9
chore(deps): bump webpack from 5.106.1 to 5.106.2
chore(deps): bump the npm-deps group across 1 directory with 6 updates
chore(deps): bump the npm-updates group across 1 directory with 48 updates
porsche-design-system/porsche-design-system #4395
Bump webpack from 5.106.1 to 5.106.2 in /XtermBlazor/src in the npm-minor-and-patch group
BattlefieldDuck/XtermBlazor #138
chore(deps): bump webpack from 5.106.0 to 5.106.2
Bump the npm-minor-and-patch group across 1 directory with 7 updates
Blake-C/jekyll-digitalblake.com-2025 #12
Bump the devdependenciesminor group with 2 updates
guardian/commercial #2541
chore(deps-dev): bump the dev-dependencies group with 7 updates
hilleer/vscode-yaml-plus-json #479
chore: Bump webpack from 5.106.0 to 5.106.2 in /examples/openfeature_web/webapp
thomaspoignant/go-feature-flag #5146
chore(deps-dev): bump webpack from 5.106.0 to 5.106.2 in /superset-frontend
apache/superset #39544
Bump the development group with 5 updates
alveusgg/extension #478
npm-load-test: bump webpack from 5.106.1 to 5.106.2 in /sources/packages/load-test
bcgov/SIMS #6057
build(deps-dev): bump webpack from 5.106.1 to 5.106.2
chore(deps): bump the npm-minor-and-patch group across 1 directory with 10 updates
ecadlabs/beacon-sdk-taquito-patches #33
Bump webpack from 5.106.1 to 5.106.2
enonic/app-standardidprovider #1281
chore(deps)(deps-dev): bump the tooling group with 3 updates
engilic/serbiantransliterator #388
Build(deps): Bump webpack from 5.106.1 to 5.106.2
gregorbg/worldcubeassociation.org #1788
Bump the js-production-dependencies group across 1 directory with 24 updates
texpert/rails_6_rss_reader #5617
chore(deps): bump the minor-and-patch group with 28 updates
Laparo/hemera #486
Package Details
| Name: | webpack |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/webpack |
| JSON API: | View JSON |
Security Advisories
Package Information
Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.
| Repository: | https://github.com/webpack/webpack |
| Homepage: | https://github.com/webpack/webpack |
| Latest Release: |
5.99.9
about 1 year ago |
| Dependent Repos: | 3,177 |
| Dependent Packages: | 216,244 |
| Downloads: | 136,240,906 |
| Ranking: | Top 0.3868% by dependent repos Top 0.0129% by downloads Top 0.0002% by dependent pkgs |