CVE-2018-14732

npm/webpack-dev-server CVE-2018-14732: high 7.5

Missing Origin Validation in webpack-dev-server

Action: Upgrade webpack-dev-server to 3.1.11 or later.

npm i webpack-dev-server@3.1.11

Affected

Fixed versions

Sources

• osv: GHSA-cf66-xwfp-gvc4
• https://nvd.nist.gov/vuln/detail/CVE-2018-14732
• https://github.com/webpack/webpack-dev-server/issues/1445
• https://github.com/webpack/webpack-dev-server/issues/1620
• https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10
• https://github.com/webpack/webpack-dev-server
• https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md#3111-2018-12-21
• https://www.npmjs.com/advisories/725

CVE-2018-14732 · published 2019-01-04T17:40:59Z · modified 2023-11-08T03:59:56.988012Z · JSON