VYPR

webpack-subresource-integrity

by waysact

Source repositories

CVEs (1)

  • CVE-2020-15262Oct 19, 2020
    risk 0.00cvss epss 0.01

    In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for…