PT-2026-6640

Name of the Vulnerable Software and Affected Versions Webpack versions 5.49.0 through 5.103.9 Description Webpack’s HTTPS resolver HttpUriPlugin does not re-validate allowed URLs after following HTTP 30x redirects when the experiments.buildHttp feature is enabled. This allows an import that appea...