HackerOne hapi node module vulnerabilities
4 published CVEs name HackerOne hapi node module among the affected products.
- Published CVEs
- 4
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20183
Newest CVEs
- CVE-2017-16013
hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is…
HackerOne · hapi node module
High7.5 - CVE-2015-9236
Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed…
HackerOne · hapi node module
Medium5.3 - CVE-2015-9243
When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included…
HackerOne · hapi node module
Medium5.9 - CVE-2015-9241
Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500…
HackerOne · hapi node module
High7.5