npm/webpack-subresource-integrity CVE-2020-15262: low 3.7, EPSS 0.52%

Unprotected dynamically loaded chunks

Action: Upgrade webpack-subresource-integrity to 1.5.1 or later.

npm i webpack-subresource-integrity@1.5.1

Affected

Fixed versions

Sources

• osv: GHSA-4fc4-chg7-h8gh
• https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
• https://nvd.nist.gov/vuln/detail/CVE-2020-15262
• https://github.com/waysact/webpack-subresource-integrity/issues/131
• https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
• https://github.com/waysact/webpack-subresource-integrity

CVE-2020-15262 · published 2020-10-19T20:02:44Z · modified 2026-07-08T06:28:14.210457449Z · JSON