CVE-2023-28154 Webpack 5 before 5.76.0 does not avoid cross

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in Webpack 5 and webpack-dev Announced Two vulnerabilities affecting Webpack have been reported. CVE-2023-28154, published on March 13, 2023, relates to cross-site scripting issues in Webpack 5 versions prior to 5.76.0. Additionally, CVE-2024-29180, published on March 21, 2024, concerns the webpack-dev package. 2 sources 48