CVE-2025-68458
1 advisory.
npm/webpack CVE-2025-68458: low 3.7, EPSS 0.23%
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior
Action: Upgrade webpack to 5.104.1 or later.
npm i webpack@5.104.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.49.0 | 5.104.1 | - |
Fixed versions
| 5.104.1 |
Sources
- osv: GHSA-8fgc-7cc6-rx7x
- https://github.com/webpack/webpack/security/advisories/GHSA-8fgc-7cc6-rx7x
- https://nvd.nist.gov/vuln/detail/CVE-2025-68458
- https://github.com/webpack/webpack
CVE-2025-68458 · published · modified · JSON