Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions webpack-dev-middleware may allow code execution
published 1 month ago
Summary
The webpack-dev-middleware component used in GitHub Actions contains a security weakness that could let an attacker run malicious code on the build server. This could compromise the integrity of your CI pipelines and any data they handle. Update to version 8.1.1‑tuxcare.1 or later to resolve the issue.
What to do
- Update GitHub Actions webpack-dev-middleware to version 8.1.1-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | webpack-dev-middleware |
< 8.1.1-tuxcare.1 Fix: upgrade to 8.1.1-tuxcare.1
|
Original advisory text
TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 8.1.1-tuxcare.1.
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLSA-2026-1790876768 · OSV
Track software like this
Free during beta