Skip to content
OpenAdvisories

Product · HackerOne

hapi node module

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2015-9236

    Incorrect handling of CORS preflight request headers in hapi

    Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one rou…

    HackerOne hapi node module hapi npm
  • Medium —
    CVE-2015-9243

    Unsafe Merging of CORS Configuration Conflict in hapi

    When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like …

    HackerOne hapi node module hapi npm