Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

webpack-dev-middleware 安全漏洞

🗓️ 21 Mar 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType 
cnnvd
 cnnvd🔗 www.cnnvd.org.cn👁 3 Views

Security flaw in webpack-dev-middleware before 7.1.0, 6.1.2, 5.3.4 allows path traversal via URLs.

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
15 Apr 202502:34
–ibm
IBM Security Bulletins		Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
10 May 202415:38
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to webpack webpack-dev-middleware directory transversal vulnerability [CVE-2024-29180]
5 Aug 202420:55
–ibm
IBM Security Bulletins		Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
23 Apr 202414:11
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities
26 Mar 202504:10
–ibm
IBM Security Bulletins		Security Bulletin: The Log Source Management App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2024-28849, CVE-2024-29041, CVE-2024-29180)
7 May 202420:03
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in components for Cloud Pak System
28 Oct 202417:56
–ibm
BDU FSTEC		The vulnerability of intermediate software for the Express Webpack-dev-middleware is related to insufficient checking of URL addresses, which allows unauthorized access to protected information.
31 May 202400:00
–bdu_fstec
Chainguard		CVE-2024-29180 vulnerabilities
21 Mar 202516:12
–cgr
CVE		CVE-2024-29180
21 Mar 202416:47
–cve
Rows per page
SourceLink
githubwww.github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-wr3j-pwj9-hqq6
githubwww.github.com/webpack/webpack-dev-middleware/commit/189c4ac7d2344ec132a4689e74dc837ec5be0132
githubwww.github.com/webpack/webpack-dev-middleware/commit/9670b3495da518fe667ff3428c5e4cb9f2f3d353
githubwww.github.com/webpack/webpack-dev-middleware/commit/e10008c762e4d5821ed6990348dabf0d4d93a10e
githubwww.github.com/webpack/webpack-dev-middleware/blob/7ed24e0b9f53ad1562343f9f517f0f0ad2a70377/src/utils/getFilenameFromUrl.js
githubwww.github.com/webpack/webpack-dev-middleware/blob/7ed24e0b9f53ad1562343f9f517f0f0ad2a70377/src/utils/setupOutputFileSystem.js
githubwww.github.com/webpack/webpack-dev-middleware/releases/tag/v5.3.4
githubwww.github.com/webpack/webpack-dev-middleware/releases/tag/v6.1.2
githubwww.github.com/webpack/webpack-dev-middleware/releases/tag/v7.1.0
accesswww.access.redhat.com/security/cve/cve-2024-29180
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Jan 2026 00:00Current
8High risk
Vulners AI Score8
CVSS 3.17.4 - 7.5
EPSS0.03394
SSVC
webpack dev middlewarepath traversalvulnerable versionsurl handling
3