search

webpack / webpack-dev-server

Serves a webpack app. Updates the browser on changes. Documentation https://webpack.js.org/configuration/dev-server/.
MIT License
7.8k stars 1.43k forks source link

cve-2024-45296 #5320

Closed xingzhedashan closed 2 days ago

xingzhedashan commented 2 days ago

Bug report

CVE-2024-45296. - Upgrade express to [4.2.0] (https://expressjs.com/2024/09/29/security-releases.html#moderate-severity-vulnerability-cve-2024-45296-in- path-to-regexp-utility-module). Upgrading that should fix this.

Actual Behavior

Expected Behavior

How Do We Reproduce?

Please paste the results of npx webpack-cli info here, and mention other relevant information

alexander-akait commented 2 days ago

https://github.com/webpack/webpack-dev-server/blob/master/package.json#L62

JoyceLf commented 2 days ago

@xingzhedashan Hi, can release a new version to npm? I found that the express dependency version is 4.19.2 on tag 5.1.0. Many thanks.