Skip to content
OpenAdvisories

Package · npm

@hapi/hoek

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2020-36604

    hoek subject to prototype pollution via the clone function.

    hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.

    hoek node-hoek node-hoek @hapi/hoek Debian Ubuntu npm
  • Low —
    GHSA-22h7-7wwg-qmgg

    Prototype Pollution in @hapi/hoek

    Versions of `@hapi/hoek` prior to 8.5.1 and 9.0.3 are vulnerable to Prototype Pollution. The `clone` function fails to prevent the modification of the Object prototype when passed specially-crafted input. Attackers may use this to change existing properties t…

    @hapi/hoek npm