Read the docs

Webpack-subresource-integrity Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Webpack-subresource-integrity Project records in CISA KEV

No Webpack-subresource-integrity Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 18

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00519 Published 2020-10-19 Fixed in 1.5.1 CWE-345
Open these records in search →