Skip to content
OpenAdvisories

Product · hapijs

@hapi/content

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-115728

    @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing

    @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition() caused by an incomplete fix for CVE-2026-35213. Unauthenticated remote attackers can send multipart uploads with a long Content-Dispos…

    hapijs @hapi/content @hapi/content npm