Skip to content
OpenAdvisories
High USN-6116-1 1 CVE

node-hawk vulnerability

Published May 30, 2023 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that hawk incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS node-hawk 6.0.1+dfsg-1+deb10u1build0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS node-hawk 7.1.2+dfsg-1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS node-hawk 8.0.1+dfsg-1ubuntu0.22.04.1

Vulnerabilities 1

  • High 7.4
    CVE-2022-29167

    ReDoS vulnerability in header parsing in hawk

    Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a…

    Mozilla hawk hawk node-hawk Debian Ubuntu npm

References

  • report
    https://ubuntu.com/security/CVE-2022-29167