CVE-2025-56648
1 advisory.
npm/@parcel/reporter-dev-server CVE-2025-56648: medium 6.5
Parcel has an Origin Validation Error vulnerability
Action: Upgrade @parcel/reporter-dev-server to 2.16.4 or later.
npm i @parcel/reporter-dev-server@2.16.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.1 | 2.16.4 | - |
Fixed versions
| 2.16.4 |
Sources
- osv: GHSA-qm9p-f9j5-w83w
- https://nvd.nist.gov/vuln/detail/CVE-2025-56648
- https://github.com/parcel-bundler/parcel/issues/10216
- https://github.com/parcel-bundler/parcel/pull/10138
- https://github.com/parcel-bundler/parcel/commit/4bc56e3242a85491c7edf589966e9b44c6330c49
- https://github.com/parcel-bundler/parcel/commit/9e2f6f1377123cff3b82f6dde4e20336efc846a1
- https://gist.github.com/R4356th/41f468def606b2406e36f7193f5322b8
- https://github.com/parcel-bundler/parcel
- https://github.com/parcel-bundler/parcel/discussions/10089
CVE-2025-56648 · published · modified · JSON