If you discover a security issue in webpack, please report it by sending an email to [email protected].
This will allow us to assess the risk, and make a fix available before we add a bug report to the GitHub repository.
Thanks for helping make webpack safe for everyone.
In the event of a security incident, please refer to the Security Incident Response Plan.