@4399ywkf/core (>=5.0.0, <=5.0.32), @all-star/base (>=0.17.0, <=0.18.2) +316 more potentially affected by CVE-2025-30359 +1 more via webpack-dev-server (>=5.0.0, <=5.2.3)

webpack-dev-server NPM version =5.0.0, =5.0.0, =0.17.0, =0.17.0, =0.17.0, =8.0.0-next.2, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =1.1.0 and more Source cves: CVE-2025-30359, CVE-2026-6402 Source...

Linux Distros Unpatched Vulnerability : CVE-2025-30359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

CVE-2025-30359 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows...

@all-star/base (>=0.17.0, <=0.18.2), @all-star/react (>=0.17.0, <=0.18.2) +163 more potentially affected by CVE-2025-30359 via webpack-dev-server (>=5.0.0, <=5.2.0)

webpack-dev-server NPM version =5.0.0, =0.17.0, =0.17.0, =0.17.0, =18.0.0-next.0, =1.0.5-beta.4, =1.0.1-beta.1, =0.18.3, =0.0.1, =0.3.2-develop-1171, =0.4.0, =0.1.15, =0.0.2, =0.0.2, =0.1.3 and more Source cves: CVE-2025-30359 Source advisory: OSV:GHSA-4V9V-HFQ4-RM2V...

CVE-2025-30359

webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by a script tag is not subject to same...

CVE-2025-30359 webpack-dev-server users' source code may be stolen when they access a malicious web site

webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by a script tag is not subject to same...

CVE-2025-30359 webpack-dev-server users' source code may be stolen when they access a malicious web site

webpack-dev-server allows users to use webpack with a development server that provides live reloading. Prior to version 5.2.1, webpack-dev-server users' source code may be stolen when they access a malicious web site. Because the request for classic script by a script tag is not subject to same...