sri problem after update to -p8 in checkout

[klartextmedia]

i have a big problem after updating from Magento ver. 2.4.7-p7   to -p8. After some time I get an exception in checkout that's caused in Csp Module. It's gone after clearing the cache or do da setup:upgrade, but comes back after a few days. Seems to be a problem with SRI and not the given error. Is there any patch for that problem?

Time: 2025-10-24 05:21:54 GMT
Error:
Unable to unserialize value. Error: Syntax error

Trace:
#1 Magento\Csp\Model\SubresourceIntegrityRepository->getData() called at [vendor/magento/module-csp/Model/SubresourceIntegrityRepository.php:86]
#2 Magento\Csp\Model\SubresourceIntegrityRepository->getByPath() called at [vendor/magento/module-csp/Plugin/AddDefaultPropertiesToGroupPlugin.php:91]
#3 Magento\Csp\Plugin\AddDefaultPropertiesToGroupPlugin->beforeGetFilteredProperties() called at [vendor/magento/framework/Interception/Interceptor.php:121]
#4 Magento\Framework\View\Asset\GroupedCollection\Interceptor->Magento\Framework\Interception\{closure}() called at [vendor/magento/framework/Interception/Interceptor.php:153]
#5 Magento\Framework\View\Asset\GroupedCollection\Interceptor->___callPlugins() called at [generated/code/Magento/Framework/View/Asset/GroupedCollection/Interceptor.php:41]
#6 Magento\Framework\View\Asset\GroupedCollection\Interceptor->getFilteredProperties() called at [vendor/magento/framework/View/Asset/GroupedCollection.php:60]
#7 Magento\Framework\View\Asset\GroupedCollection->add() called at [generated/code/Magento/Framework/View/Asset/GroupedCollection/Interceptor.php:23]
#8 Magento\Framework\View\Asset\GroupedCollection\Interceptor->add() called at [vendor/magento/framework/View/Page/Config.php:498]
#9 Magento\Framework\View\Page\Config->addPageAsset() called at [vendor/magento/framework/View/Page/Config/Generator/Head.php:132]
#10 Magento\Framework\View\Page\Config\Generator\Head->processAssets() called at [vendor/magento/framework/View/Page/Config/Generator/Head.php:104]
#11 Magento\Framework\View\Page\Config\Generator\Head->process() called at [vendor/magento/framework/View/Layout/GeneratorPool.php:93]

[iaugustoir78a1]

Same here, a corrupted pub/static/frontend/sri-hashes.json it seems - now why 🤔

[devidt4567d320]

Seeing this on 2.4.7-p8 when SRI hashes drift after CDN minify or GTM inline changes. Clearing cache only masks it. Put checkout CSP in report-only, collect violations, hash/nonce inline scripts, and disable edge minify for checkout. Rebuild static assets across nodes. We reproduced via a CMS snippet from  bostonlogancarservice

[iaugustoir78a1]

There's an official fix available now: https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27997