CVE-2026-112085 | OpenJS webpack-dev-server up to 5.2.6/6.0.x WebSocket Upgrade cross-domain policy

October 22, 2026 Yanac

A vulnerability categorized as problematic has been discovered in OpenJS webpack-dev-server up to 5.2.6/6.0.x. The affected element is an unknown function of the component WebSocket Upgrade. The manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is cataloged as CVE-2026-112085. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More