webpack.js webpack

Name: webpack.js webpack
Brand: webpack.js

productUS

cpe:2.3:a:webpack.js:webpack:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical0high1medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-43788US	medium6.1	0.96% (61st)	Exploit	5.94.0	2024-08-27	< 5.94.0
CVE-2023-28154US	critical9.8	1.41% (72nd)	—	5.76.0	2023-03-13	5.0.0 → 5.76.0
CVE-2025-68458US	—	0.23% (14th)	—	5.104.1	2026-02-05	5.49.0 → 5.104.1
CVE-2025-68157US	—	0.23% (14th)	—	5.104.0	2026-02-05	5.49.0 → 5.104.0

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.