VYPR

npm package

webpack-subresource-integrity

pkg:npm/webpack-subresource-integrity

Vulnerabilities (1)

  • CVE-2020-15262Oct 19, 2020
    affected < 1.5.1fixed 1.5.1

    In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for suc