@rspack/core

2.2.9 · 13 Oct 2026MIT4.6M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @rspack/core. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	2.2.9	No known advisory
	1.7.12	No known advisory
	0.7.5	8 open advisories, worst moderate · last release Jun 2024, no longer updated

Your version

Moderate
DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSSGHSA-84jw-g43v-8gjm · 19 Sep 2024
- 0.7.x and older0.0.1 – 0.7.5No fix, no longer updated

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.