Skip to content
OpenAdvisories

Package · npm

content

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-119202

    @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service

    @hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Content.disposition() uses an unanchored parameter-name expression in a global regular-expression scan, causing repeated failed matching over the remaining input when a Content-Disp…

    hapijs content @hapi/content content npm
  • High —
    GHSA-5854-jvxx-2cg9

    Denial of Service in content

    Versions of `content` are vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors (as op…

    content npm
  • High 7.5
    CVE-2017-16111

    Regular Expression Denial of Service in content

    The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Dispo…

    HackerOne content node module content npm