https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:06:25.874059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-60332 cnvd-2020-60332 2026-10-15T19:06:25.878167+00:00 cnvd-2020-60332 https://cve.radiocsirt.org/vuln/euvd-2026-42810 EUVD-2026-42810 2026-10-15T19:06:25.878199+00:00 EUVD-2026-42810 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15262 fkie_cve-2020-15262 2026-10-15T19:06:25.878213+00:00

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected. This issue is patched in version 1.5.1.

 https://cve.radiocsirt.org/vuln/ghsa-4fc4-chg7-h8gh GHSA-4fc4-chg7-h8gh — Unprotected dynamically loaded chunks 2026-10-15T19:06:25.878242+00:00

Affected: npm: webpack-subresource-integrity

### Impact

All dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected.

### Patches

This issue is patched in version 1.5.1.

### Workarounds

N/A

### References

https://github.com/waysact/webpack-subresource-integrity/issues/131

### For more information If you have any questions or comments about this advisory: * Comment on [webpack-subresource-integrity issue #131](https://github.com/waysact/webpack-subresource-integrity/issues/131) * Or email us at [security@waysact.com](mailto:security@waysact.com)

 https://cve.radiocsirt.org/vuln/gsd-2020-15262 gsd-2020-15262 2026-10-15T19:06:25.878285+00:00 gsd-2020-15262