CVE-2025-56648

6.5

MEDIUMCVSS v3

Published

September 17, 2025

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them.

parcel

NPMBlazing fast, zero configuration web application bundler

<= 1.10.3, = 2.0.0NVD

parcel-bundler/parcel

GitHubThe zero configuration build tool for the web. 📦🚀

<= 1.10.3, = 2.0.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2025-56648

Description

More on this CVE