CLSA-2026-1791666413 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.10.2-tuxcare.2...

CLSA-2026-1791666312 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.12.0-tuxcare.2...

fix-react2shell-next

fix-react2shell-next Un comando per risolvere CVE-2025-66478 React 2 Shell RCE nella tua app Next.js / React RSC. npx fix-react2shell-next Aggiornamenti di versione deterministici secondo gli advisory ufficiali. Cosa fa 1. Scansiona ricorsivamente tutti i file package.json gestisce monorepo 2...

react2shell-scanner

react2shell-scanner Triage scanner for CVE-2025-55182 R...

ROOT-APP-NPM-GHSA-P3F5-W63M-MXPH GHSA-p3f5-w63m-mxph in webpack-dev-middleware - Patched by Root

Root has patched GHSA-p3f5-w63m-mxph in the webpack-dev-middleware package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-76844 CVE-2026-76844 in webpack-dev-middleware - Patched by Root

Root has patched CVE-2026-76844 in the webpack-dev-middleware package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-29180 CVE-2024-29180 in webpack-dev-middleware - Patched by Root

Root has patched CVE-2024-29180 in the webpack-dev-middleware package for Root:npm. Multiple fixed versions available...

CLSA-2026-1790944348 TuxCare security update for webpack-dev-server (2 CVEs)

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 4.9.3-tuxcare.2...

CLSA-2026-1790884229 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.0-tuxcare.4...

CLSA-2026-1790876768 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 8.1.1-tuxcare.1...

CLSA-2026-1790866203 TuxCare security update for webpack (3 CVEs)

TuxCare rebuilt webpack to address 3 CVEs. Fixed in 5.82.1-tuxcare.1...

CLSA-2026-1790866099 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.4-tuxcare.2...

CLSA-2026-1790866070 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 6.1.3-tuxcare.1...

CLSA-2026-1790863106 TuxCare security update for webpack-dev-server (2 CVEs)

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 5.2.5-tuxcare.1...

Rocky Linux 9 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2023_1591)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231591 advisory. webpack: avoid cross-realm objects CVE-2023-28154 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus ha...

Exploit for Improper Authorization in Vercel Next.Js

React2Shell Scanner CVE-2025-29927 — Next.js Server Ac...

Malicious Package

Overview epic-webpack-node-externals is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview epic-webpack-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview epic-webpack-hot-dev-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview epic-webpack-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...