Skip to content

Upgrade webpack-dev-server to resolve CVE-2026-9595 - #498

Merged
cigamit merged 1 commit into
mainfrom
CVE-2026-9595
Jun 22, 2026
Merged

Upgrade webpack-dev-server to resolve CVE-2026-9595#498
cigamit merged 1 commit into
mainfrom
CVE-2026-9595

Conversation

@cigamit

@cigamit cigamit commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@cigamit cigamit self-assigned this Jun 22, 2026
Copilot AI review requested due to automatic review settings June 22, 2026 03:35
@cigamit cigamit added dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically javascript Pull requests that update javascript code labels Jun 22, 2026
@cigamit
cigamit requested a review from TheWitness June 22, 2026 03:36

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the AWX React UI’s development tooling dependency on webpack-dev-server to a patched version that addresses CVE-2026-9595.

Changes:

  • Bump webpack-dev-server from ^5.2.4 to ^5.2.5 in awx/ui/package.json.
  • Update awx/ui/package-lock.json to lock webpack-dev-server to 5.2.5 with updated tarball URL and integrity hash.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
awx/ui/package.json Updates the declared webpack-dev-server devDependency to ^5.2.5.
awx/ui/package-lock.json Updates the lockfile entries to resolve and pin webpack-dev-server@5.2.5.
Files not reviewed (1)
  • awx/ui/package-lock.json: Generated file

@cigamit
cigamit merged commit 8d486e6 into main Jun 22, 2026
1 check passed
@cigamit
cigamit deleted the CVE-2026-9595 branch June 22, 2026 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants