📦 Webpack

This vulnerability in Webpack 5 allows attackers to bypass JavaScript realm isolation and access the global object through malicious magic comments. It affects applications using Webpack 5 for bundlin...

This CVE describes a security bypass vulnerability in Webpack's HTTP(S) resolver when the experiments.buildHttp feature is enabled. It allows attackers to bypass URL allow-list restrictions by exploit...

This CVE describes a security bypass vulnerability in Webpack's HTTP(S) resolver when the experiments.buildHttp feature is enabled. Attackers can craft URLs with userinfo components to bypass allowedU...