Skip to content
OpenAdvisories

Package · npm

hawk

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.4
    CVE-2022-29167

    ReDoS vulnerability in header parsing in hawk

    Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a…

    Mozilla hawk hawk node-hawk Debian Ubuntu npm
  • High 7.5
    CVE-2016-2515

    Regular Expression Denial of Service in hawk

    Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.

    hawk npm