Skip to content

Upgrade webpack-dev-server to resolve CVE-2026-14631 and CVE-2026-14620#594

Merged
cigamit merged 1 commit into
mainfrom
CVE-2026-14631
Jul 21, 2026
Merged

Upgrade webpack-dev-server to resolve CVE-2026-14631 and CVE-2026-14620#594
cigamit merged 1 commit into
mainfrom
CVE-2026-14631

Conversation

@cigamit

@cigamit cigamit commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@cigamit
cigamit requested a review from TheWitness July 21, 2026 20:24
@cigamit cigamit self-assigned this Jul 21, 2026
Copilot AI review requested due to automatic review settings July 21, 2026 20:24
@cigamit cigamit added dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically javascript Pull requests that update javascript code labels Jul 21, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the AWX UI’s development server dependency to address reported webpack-dev-server CVEs by bumping the patched version and updating the lockfile accordingly.

Changes:

  • Bump webpack-dev-server from ^5.2.5 to ^5.2.6 in awx/ui/package.json.
  • Update awx/ui/package-lock.json to reflect the new webpack-dev-server version (and related resolved metadata).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
awx/ui/package.json Updates the declared webpack-dev-server dependency version.
awx/ui/package-lock.json Updates npm lock entries for webpack-dev-server (and related transitive resolution data).
Files not reviewed (1)
  • awx/ui/package-lock.json: Generated file

Comment thread awx/ui/package-lock.json
@cigamit
cigamit merged commit d4770ef into main Jul 21, 2026
1 check passed
@cigamit
cigamit deleted the CVE-2026-14631 branch July 21, 2026 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants