Skip to content
OpenAdvisories

Package · npm

@hapi/hoek

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    Prototype Pollution in @hapi/hoek

    Versions of `@hapi/hoek` prior to 8.5.1 and 9.0.3 are vulnerable to Prototype Pollution. The `clone` function fails to prevent the modification of the Object prototype when passed specially-crafted input. Attackers may use this to change existing properties t…