Vulnerabilities in Webpack 5 and webpack-dev Announced
First seen 18 Feb 2026, 11:17 UTC
•
•48
Export
Article Content
Browse articles
Two vulnerabilities affecting Webpack have been reported. CVE-2023-28154, published on March 13, 2023, relates to cross-site scripting issues in Webpack 5 versions prior to 5.76.0. Additionally, CVE-2024-29180, published on March 21, 2024, concerns the webpack-dev package.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2023-03-13
CVE-2023-28154 published
2024-03-21
CVE-2024-29180 published
2026-02-18
Information published about both vulnerabilities