Security vulnerability: webpack-dev-server < 5.2.1 allows potential source code exposure in non-Chromium browsers

[deekshith1856]

Airtable Webpack bundler is currently using webpack-dev-server version 4.0.0, which is affected by a known security vulnerability.

Vulnerability details:

Package: webpack-dev-server

Affected versions: < 5.2.1

Current version in use: 4.0.0

Vulnerability: Users’ source code may be exposed to theft when accessing a malicious website using a non-Chromium-based browser.

Fixed in: 5.2.1

Reference:
GitHub Security Advisory

Suggested fix:
Upgrade webpack-dev-server to version 5.2.1 or later to address the vulnerability.

Impact:
Developers using the Airtable webpack bundler may have their source code exposed if they access malicious websites using non-Chromium browsers during development.

[Aaditya-git]

Hi! I'd like to work on this. I'll bump webpack-dev-server to >= 5.2.1 to patch the advisory and verify the build still passes. Could this be assigned to me?