webpack
npm
pkg:npm/webpack
20,803 Dependabot PRs
about 22 hours ago
7,824 repositories
187 repositories
Security Advisories
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
Cross-realm object access in Webpack 5
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence
Recent PRs (filtered by: Patch PRs )
build(deps-dev): bump webpack from 5.107.1 to 5.107.2
bervProject/my-personal-web-react #2040
Bump webpack from 5.107.1 to 5.107.2
infinite-kube/Dependabot-Auto-Merge-Pipeline-Demo #545
Bump the minor group across 1 directory with 7 updates
ministryofjustice/hmpps-manage-people-on-probation-ui #1492
NPM Dev(deps-dev): Bump webpack from 5.107.1 to 5.107.2
newfold-labs/wp-module-next-steps #355
chore(deps-dev): bump webpack from 5.107.1 to 5.107.2
bbeesley/gha-auto-dependabot-rebase #1358
Bump webpack from 5.107.0 to 5.107.1
quentinlao/reactTemplate #1562
chore: bump webpack from 5.107.0 to 5.107.1
Resources-VictorIrix/ant-design #4084
NPM Dev(deps-dev): Bump webpack from 5.107.0 to 5.107.1
newfold-labs/wp-module-next-steps #354
chore (deps): bump the patch-updates group across 1 directory with 12 updates
vooltgrouplimited2-svg/CyberChef #9
chore(deps): bump webpack from 5.106.1 to 5.106.2
chore(deps): bump the npm-deps group across 1 directory with 6 updates
chore(deps): bump the npm-updates group across 1 directory with 48 updates
porsche-design-system/porsche-design-system #4395
Bump webpack from 5.106.1 to 5.106.2 in /XtermBlazor/src in the npm-minor-and-patch group
BattlefieldDuck/XtermBlazor #138
chore(deps): bump webpack from 5.106.0 to 5.106.2
Bump the npm-minor-and-patch group across 1 directory with 7 updates
Blake-C/jekyll-digitalblake.com-2025 #12
Bump the devdependenciesminor group with 2 updates
guardian/commercial #2541
chore(deps-dev): bump the dev-dependencies group with 7 updates
hilleer/vscode-yaml-plus-json #479
chore: Bump webpack from 5.106.0 to 5.106.2 in /examples/openfeature_web/webapp
thomaspoignant/go-feature-flag #5146
chore(deps-dev): bump webpack from 5.106.0 to 5.106.2 in /superset-frontend
apache/superset #39544
Bump the development group with 5 updates
alveusgg/extension #478
npm-load-test: bump webpack from 5.106.1 to 5.106.2 in /sources/packages/load-test
bcgov/SIMS #6057
build(deps-dev): bump webpack from 5.106.1 to 5.106.2
chore(deps): bump the npm-minor-and-patch group across 1 directory with 10 updates
ecadlabs/beacon-sdk-taquito-patches #33
Bump webpack from 5.106.1 to 5.106.2
enonic/app-standardidprovider #1281
chore(deps)(deps-dev): bump the tooling group with 3 updates
engilic/serbiantransliterator #388
Build(deps): Bump webpack from 5.106.1 to 5.106.2
gregorbg/worldcubeassociation.org #1788
Bump the js-production-dependencies group across 1 directory with 24 updates
texpert/rails_6_rss_reader #5617
chore(deps): bump the minor-and-patch group with 28 updates
Laparo/hemera #486
chore(deps)(deps): bump the frontend-unified group in /frontend with 20 updates
Meats-Central/ProjectMeats #4475
chore(deps-dev): bump webpack from 5.106.0 to 5.106.2 in /superset-frontend
Bump the npm-dependencies group with 18 updates
Arelle/ixbrl-viewer #1041
deps(npm): bump the minor-patch group with 26 updates
openctemio/ui #69
[dependency]: Bump the npm-dependencies group across 1 directory with 2 updates
symbol/symbol #1949
Bump the vue-npm-version group in /td.vue with 10 updates
OWASP/threat-dragon #1570
chore(deps): bump the npm-packages group across 2 directories with 9 updates
UK-Export-Finance/exip #3698
build(deps-dev): bump webpack from 5.106.1 to 5.106.2
chore(deps): update webpack requirement from ^5.106.1 to ^5.106.2 in /packages/bananass
chore(deps-dev): bump webpack from 5.106.1 to 5.106.2 in /vscode
microsoft/kiota #7618
chore(deps): bump the deps group across 1 directory with 5 updates
koekalenteri/koekalenteri #1257
Bump webpack from 5.106.1 to 5.106.2
gflohr/e-invoice-eu #538
Bump webpack from 5.106.0 to 5.106.2 in /tcms
kiwitcms/Kiwi #4332
Bump the npm-all group in /frontend with 2 updates
rodlukas/UP-admin #358
build(deps-dev): bump webpack from 5.106.1 to 5.106.2
relative-ci/bundle-stats #5685
[DEPS][NPM]: Bump webpack from 5.106.1 to 5.106.2
GingertronMk1/facman #475
Bump webpack from 5.106.1 to 5.106.2 in the webpack group
UFR6cRY9xufLKtx2idrc/FreeTube #525
Bump webpack from 5.106.1 to 5.106.2
quentinlao/reactTemplate #1526
chore: bump webpack from 5.106.1 to 5.106.2
ant-design/ant-design #57690
Package Details
| Name: | webpack |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/webpack |
| JSON API: | View JSON |
Security Advisories
Package Information
Packs ECMAScript/CommonJs/AMD modules for the browser. Allows you to split your codebase into multiple bundles, which can be loaded on demand. Supports loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.
| Repository: | https://github.com/webpack/webpack |
| Homepage: | https://github.com/webpack/webpack |
| Latest Release: |
5.99.9
about 1 year ago |
| Dependent Repos: | 3,177 |
| Dependent Packages: | 216,244 |
| Downloads: | 136,240,906 |
| Ranking: | Top 0.3868% by dependent repos Top 0.0129% by downloads Top 0.0002% by dependent pkgs |