Browse CVEs

HIGH 8.1 CVE-2020-36604 hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function. Hoek 8.5.1 / 9.0.3+ Fix from $1,9502022-09-23 MEDIUM 5.9 CVE-2017-16025 Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerabili… Nes after 6.4.0 Fix from $1,6002018-06-04 HIGH 7.5 CVE-2017-16013 hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception… Hapi after 16.1.0 Fix from $1,9502018-06-04 MEDIUM 5.3 CVE-2015-9236 Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allo… Hapi 11.0.0+ Fix from $1,6002018-05-31 HIGH 7.5 CVE-2015-9241 Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a … Hapi 11.1.3+ Fix from $1,9502018-05-29 MEDIUM 5.9 CVE-2015-9243 When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config … Hapi 11.1.4+ Fix from $1,6002018-05-29 HIGH 8.8 CVE-2018-3728 hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'appl… Hoek 4.2.0 / 5.0.3+ Fix from $1,9502018-03-30