Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jahed

#49528of 53,624
5Total CVSS
Vulnerabilities · 1
PT-2020-14322
5.0
2020-10-19
Webpack · Webpack-Subresource-Integrity · CVE-2020-15262
**Name of the Vulnerable Software and Affected Versions** webpack-subresource-integrity versions prior to 1.5.1 **Description** The issue affects dynamically loaded chunks, which receive an invalid integrity hash that is ignored by the browser. This removes the additional level of protection offered by Subresource Integrity (SRI) for such chunks. Top-level chunks are unaffected. **Recommendations** For versions prior to 1.5.1, update to version 1.5.1 to resolve the issue. As a temporary workaround, consider restricting the use of dynamically loaded chunks until the update is applied.