Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency webpack-subresource-integrity has security issue under version 1.5.1 #3958

Closed
InsaLili opened this issue Oct 22, 2020 · 2 comments
Closed

Dependency webpack-subresource-integrity has security issue under version 1.5.1 #3958

InsaLili opened this issue Oct 22, 2020 · 2 comments
Assignees
@vsavkin
Labels
outdated scope: core core nx functionality type: bug

Comments

@InsaLili
Copy link
Contributor

Current Behavior

Current version "webpack-subresource-integrity": "1.1.0-rc.6"

webpack-subresource-integrity reports security issue: Tags are injected with integrity="undefined" on v1.5.0

Ref: waysact/webpack-subresource-integrity#131

This issue is patched in version 1.5.1.

Expected Behavior

webpack-subresource-integrity version should be >= 1.5.1
@InsaLili InsaLili mentioned this issue Oct 22, 2020
Closed
@vsavkin vsavkin added the scope: core core nx functionality label Oct 23, 2020
@vsavkin vsavkin self-assigned this Oct 23, 2020
@InsaLili InsaLili mentioned this issue Nov 1, 2020
Merged
@vsavkin
Copy link
Member

vsavkin commented Nov 10, 2020

The issue has been fixed here: 1b1ddfa

@vsavkin vsavkin closed this as completed Nov 10, 2020
@github-actions
Copy link

This issue has been closed for more than 30 days. If this issue is still occuring, please open a new issue with more recent context.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 24, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@vsavkin vsavkin

Labels
outdated scope: core core nx functionality type: bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@vsavkin @InsaLili