Vulnerabilities in web-infra-dev

3 results

CVE-2026-10144HIGHRsbuild < 2.0.9 Command Injection via openBrowser() URL HandlingEPSS 1.7%CVE-2026-61782HIGH@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build MetadataEPSS 0.4%CVE-2026-59804HIGHMidscene Bridge Server - Session Hijack via Unauthenticated WebSocketEPSS 0.3%