CPE

Cpe:2.3:a:webpack.js:webpack-Dev-Server::::::::

1 brief RSS

CSRF Vulnerability in webpack-dev-server

A CSRF vulnerability (CVE-2026-14620) in webpack-dev-server 5.2.5 allows unauthenticated cross-origin requests to trigger the launchEditor() function, potentially enabling remote command execution via arbitrary local file paths.

exploited webpack-dev-server webapps csrf cve-2026-14620

1r 1t 2c 3h ago

Cpe:2.3:a:webpack.js:webpack-Dev-Server:*:*:*:*:*:*:*:*

CSRF Vulnerability in webpack-dev-server

Cpe:2.3:a:webpack.js:webpack-Dev-Server::::::::