Skip to content
OpenAdvisories

Package · npm

hapi

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    GHSA-7hx8-2rxv-66xv

    Denial of Service in hapi

    All Versions of `hapi` are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the appl…

    hapi npm
  • High 7.5
    CVE-2017-16013

    Denial of Service via malformed accept-encoding header in hapi

    hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.

    HackerOne hapi node module hapi npm
  • High —
    CVE-2015-9241

    Denial of Service in hapi

    Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until …

    HackerOne hapi node module hapi npm
  • High —
    CVE-2014-3742

    File Descriptor Leak Can Cause DoS Vulnerability in hapi

    The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors.

    hapi npm