[ Vendor · 1 CVEs ]
web-infra-dev
CVEs affecting web-infra-dev published in the last 30 days, plus any web-infra-dev CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-61782 | 24 Sep 2026 | CVSS 7.5 | @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build MetadataRsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by… | Fix |