CVE-2026-128072 | nuxt webpack-builder/rspack-builder prior 4.6.4 Development Middleware dns rebinding

SecurityVulns
Yanac

A vulnerability identified as problematic has been detected in nuxt webpack-builder and rspack-builder. Affected by this issue is some unknown functionality of the component Development Middleware. Performing a manipulation results in reliance on reverse dns resolution.

This vulnerability is cataloged as CVE-2026-128072. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More