Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
webpack-dev-middleware may allow code execution
published 25 days ago
Summary
The webpack-dev-middleware component has a security weakness that could let an attacker run malicious code on your server. It affects the current version you are using. Update to version 3.7.3-tuxcare.2 as soon as possible to fix the issue.
What to do
- Update GitHub Actions webpack-dev-middleware to version 3.7.3-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | webpack-dev-middleware |
< 3.7.3-tuxcare.2 Fix: upgrade to 3.7.3-tuxcare.2
|
Original advisory text
TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.7.3-tuxcare.2.
Timeline
Published10 Oct 2026
Updated11 Oct 2026
First seen11 Oct 2026
Sources
CLSA-2026-1791666532 · OSV
Track software like this
Free during beta