Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dvvt-d496-5uay
Vulnerability ID VCID-dvvt-d496-5uay
Aliases CVE-2020-15262
GHSA-4fc4-chg7-h8gh
Summary Unprotected dynamically loaded chunks
Status Published
Exploitability 0.5
Weighted Severity 3.3
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-345 Insufficient Verification of Data Authenticity
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2020-15262
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2020-15262
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2020-15262
cvssv3.1_qr LOW https://github.com/advisories/GHSA-4fc4-chg7-h8gh
cvssv3.1 3.7 https://github.com/waysact/webpack-subresource-integrity
generic_textual LOW https://github.com/waysact/webpack-subresource-integrity
cvssv3.1 3.7 https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
generic_textual LOW https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
cvssv3.1 3.7 https://github.com/waysact/webpack-subresource-integrity/issues/131
generic_textual LOW https://github.com/waysact/webpack-subresource-integrity/issues/131
cvssv3.1 3.7 https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
cvssv3.1_qr LOW https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
generic_textual LOW https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
cvssv3.1 3.7 https://nvd.nist.gov/vuln/detail/CVE-2020-15262
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2020-15262
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2020-15262
https://github.com/waysact/webpack-subresource-integrity
https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
https://github.com/waysact/webpack-subresource-integrity/issues/131
CVE-2020-15262 https://nvd.nist.gov/vuln/detail/CVE-2020-15262
GHSA-4fc4-chg7-h8gh https://github.com/advisories/GHSA-4fc4-chg7-h8gh
GHSA-4fc4-chg7-h8gh https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/waysact/webpack-subresource-integrity
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/waysact/webpack-subresource-integrity/commit/3d7090c08c333fcfb10ad9e2d6cf72e2acb7d87f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/waysact/webpack-subresource-integrity/issues/131
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/waysact/webpack-subresource-integrity/security/advisories/GHSA-4fc4-chg7-h8gh
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-15262
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.36585
EPSS Score 0.00159
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T20:27:04.534347+00:00 GHSA Importer Import https://github.com/advisories/GHSA-4fc4-chg7-h8gh 38.6.0