GHSA-g84c-rxfj-3j2c
HighAdvisory
Published 21 Mar 2024In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.012
- 68th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 72
- of 17,957 indexed, latest versions
- Container images
- 64
- deployed by those charts
- Fix available
- 1 of 1
- affected package
webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath
Carried by container images the latest versions of 72 of 17,957 indexed charts deploy, on 64 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| webpack-dev-middlewarenpm | 1.9.0, 1.11.0, 1.12.2, 2.0.6+14 more | 5.3.4, 7.4.6 | 64 |
- OSV records
- GHSA-g84c-rxfj-3j2cGHSA-wr3j-pwj9-hqq6
- Also known as
- CVE-2024-29180, CVE-2026-76844
Charts affected
72 by stars
Container images carrying it
64 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| vlebediantsev/ | 007c6670ff48 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| vlebediantsev/ | 945675fd2636 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| vlebediantsev/ | 54f69d116c50 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| winfred008/ | 10a68de5b398 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| ghcr.io/ | a8d40779eeae | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| ghcr.io/ | e106681e7673 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| ghcr.io/ | 605ebc091fa1 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| ghcr.io/ | 763daf9caf8e | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| ghcr.io/ | ed07e7ca098d | webpack-dev-middleware | 7.4.6 | 1 |
| ghcr.io/ | a288b4571142 | webpack-dev-middleware | 7.4.6 | 1 |
| quay.io/ | ce6938ff6709 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| quay.io/ | 7a4b9fedc724 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| quay.io/ | 99ccdfd543e1 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |
| registry.gitlab.com/ | fda21b0a0344 | webpack-dev-middleware webpack-dev-middleware | 5.3.4 7.4.6 | 1 |