CVE-2026-114348

The webpack-dev-server development server (versions 5.1.0 to 5.2.6 and 6.0.0 ) is vulnerable to information disclosure via an unauthenticated open-editor endpoint . The root cause is a Host header validation bypass where values starting with file: or specific extension schemes short-circuit secur...