webpack CVE debriefs

CVE-2026-76844

CVE-2026-76844 is a path traversal vulnerability in webpack-dev-middleware. The vulnerability arises when the publicPath is not terminated with a slash, allowing an attacker to access files outside the intended directory. This occurs because the traversal guard only matches '..' as a whole path segment, while the containment test and file path construction allow an attacker to bypass the guard and access [truncated]