Skip to content
Threat Feed
Subscribe

Product

Webpack-Dev-Middleware

1 brief RSS
high advisory

Path Traversal in webpack-dev-middleware (CVE-2026-76844)

An incomplete fix for CVE-2024-29180 in webpack-dev-middleware allows path traversal via crafted URL requests when publicPath lacks a trailing slash, potentially leading to arbitrary local file read.

webpack-dev-middleware
1t 2c