webpack-dev-server
webpack-dev-server copied to clipboard
CVE-2024-47764 (GHSA-pxg6-pf52-xh8x) - versions < 0.7.0 of cookie have a low severity vulnerability
Per CVE-2024-47764 (https://github.com/advisories/GHSA-pxg6-pf52-xh8x), versions < 0.7.0 of cookie have a low severity vulnerability.
webpack-dev-server's depends on cookie 0.6.0 via express 4.21.0. express 4.21.1 addresses this issue.
Upgrade webpack-dev-server's dependency on express to express 4.21.1.
- [ ] This is a bug
- [x] This is a modification request
Code
// webpack.config.js
// additional code, remove if not needed.