Skip to content
OpenAdvisories

Package · npm

@hapi/boom

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-2ggq-vfcp-gwhj

    Cross-Site Scripting in @hapi/boom

    Versions of `@hapi/boom` prior to 0.3.8 are vulnerable to Cross-Site Scripting (XSS). The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser. ## Recommendation Upgrade to version 0.…

    @hapi/boom npm