Hapi vulnerabilities
3 vulnerabilities
Known vulnerabilities in Hapi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Formula1 vulnerabilities
- Hoek Node Module1 vulnerabilities
- Inert1 vulnerabilities
CVE-2018-3728debiannode-hoek+4
EPSS score4.19%
hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.CVE-2014-10068hackeroneinert node module+2EPSS score1.90%
The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.CVE-2023-25166hapiformula+2EPSS score0.61%
formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.