CVE-2026-76844 | webpack webpack-dev-middleware up to 5.3.4/6.1.3/7.4.5/8.1.1 URL Parser getFilenameFromUrl path traversal

A vulnerability described as problematic has been identified in webpack webpack-dev-middleware up to 5.3.4/6.1.3/7.4.5/8.1.1. This vulnerability affects the function getFilenameFromUrl of the component URL Parser. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-76844. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More