CVE-2026-61782
1 advisory.
npm/@rsdoctor/rspack-plugin CVE-2026-61782: high 7.5
@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata
Action: Upgrade @rsdoctor/rspack-plugin to 1.5.16 or later.
npm i @rsdoctor/rspack-plugin@1.5.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.16 | - |
Fixed versions
| 1.5.16 |
Sources
- osv: GHSA-jmg2-rcxh-w8q3
- https://github.com/web-infra-dev/rsdoctor/security/advisories/GHSA-jmg2-rcxh-w8q3
- https://nvd.nist.gov/vuln/detail/CVE-2026-61782
- https://github.com/web-infra-dev/rsdoctor/pull/1744
- https://github.com/web-infra-dev/rsdoctor/pull/1758
- https://github.com/web-infra-dev/rsdoctor/commit/602eb306a49b6d19c4c1ea9d8ee0f8caab9e208f
- https://github.com/web-infra-dev/rsdoctor/commit/e9aaef21f85becfe43a46f716509f41ea5edeb40
- https://github.com/web-infra-dev/rsdoctor
CVE-2026-61782 · published · modified · JSON