search

nrwl / nx

Smart Monorepos · Fast CI
https://nx.dev
MIT License
23.57k stars 2.36k forks source link

Dependency webpack-subresource-integrity has security issue under version 1.5.1 #3958

Closed InsaLili closed 3 years ago

InsaLili commented 4 years ago

Current Behavior

Current version "webpack-subresource-integrity": "1.1.0-rc.6"

webpack-subresource-integrity reports security issue: Tags are injected with integrity="undefined" on v1.5.0

Ref: https://github.com/waysact/webpack-subresource-integrity/issues/131

This issue is patched in version 1.5.1.

Expected Behavior

webpack-subresource-integrity version should be >= 1.5.1

vsavkin commented 3 years ago

The issue has been fixed here: 1b1ddfa3bb799f7466854faafb5108d674da6e8d

github-actions[bot] commented 1 year ago

This issue has been closed for more than 30 days. If this issue is still occuring, please open a new issue with more recent context.