waysact/webpack-subresource-integrity

waysact/webpack-subresource-integrity

GitHubGitHub
GitHubgithub.com
Releases51
Frequency1 month 3 weeks
Last Release
Stars372
Webpack plugin for enabling Subresource Integrity.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-15262↗
3.7 LOW5 MEDIUM

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected. This issue is patched in version 1.5.1.