VYPR

Webpack Subresource Integrity

by Webpack Subresource Integrity Project

CVEs (1)

  • CVE-2020-15262LowOct 19, 2020
    risk 0.17cvss 3.7epss 0.01

    In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for…