Hapi Node Module (Hackerone) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-04. Vendor: Hackerone.

CVEs of Hapi Node Module

• CVE-2017-16013 - CVSS 7.5 (high), 2018-06-04: hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is…
• CVE-2015-9236 - CVSS 5.3 (medium), 2018-05-31: Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed…
• CVE-2015-9243 - CVSS 5.9 (medium), 2018-05-29: When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included…
• CVE-2015-9241 - CVSS 7.5 (high), 2018-05-29: Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500…