CVE-2026-61782 | web-infra-dev Rsdoctor up to 1.5.15 @rsdoctor/rspack-plugin /api/data/key information disclosure

September 24, 2026 Yanac

A vulnerability marked as problematic has been reported in web-infra-dev Rsdoctor up to 1.5.15. The affected element is an unknown function of the file /api/data/key of the component @rsdoctor/rspack-plugin. The manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-61782. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More