Path traversal in webpack-dev-middleware

Description

No description available.

Recommendation

Update the webpack-dev-middleware package to the latest compatible version. Followings are version details:

• Affected version(s): **<= 5.3.3

  >= 6.0.0, < 6.1.2

  >= 7.0.0, < 7.1.0**

• Patched version(s): **5.3.4

  6.1.2

  7.1.0**

References

• GHSA-wr3j-pwj9-hqq6
• CVE-2024-29180
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• seajs Cross-site Scripting vulnerability - CVE-2024-51091
• Cross-site scripting in bootstrap-select - CVE-2019-20921
• XSS vulnerability that affects bootstrap - CVE-2018-20676
• Server-Side Template Injection in formio - CVE-2020-28246

Tags:

npm

webpack-dev-middleware