{"action":"Upgrade webpack-dev-server to 3.1.11 or later.","affected":[{"fixed":"3.1.11","introduced":"0"}],"component":"webpack-dev-server","cve_ids":["CVE-2018-14732"],"ecosystem":"npm","epss":0.02486,"exploited":false,"fixed_versions":["3.1.11"],"ghsa_id":"GHSA-cf66-xwfp-gvc4","id":"tcs_01M5KFJFR56GE2TF0F30B4Y0W4","modified_at":"2023-11-08T03:59:56.988012Z","published_at":"2019-01-04T17:40:59Z","references":["https://osv.dev/vulnerability/GHSA-cf66-xwfp-gvc4","https://nvd.nist.gov/vuln/detail/CVE-2018-14732","https://github.com/webpack/webpack-dev-server/issues/1445","https://github.com/webpack/webpack-dev-server/issues/1620","https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10","https://github.com/webpack/webpack-dev-server","https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md#3111-2018-12-21","https://www.npmjs.com/advisories/725"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cf66-xwfp-gvc4","url":"https://osv.dev/vulnerability/GHSA-cf66-xwfp-gvc4"}],"summary":"Missing Origin Validation in webpack-dev-server"}