hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HHapijs Hoek
APPHapijs< 8.5.19.0 – 9.0.3 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2018-3728HIGH8.8ten sam produkt
hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MA...
CVE-2017-16013HIGH7.5ten sam vendor
hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept...
CVE-2015-9241HIGH7.5ten sam vendor
Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' except...
CVE-2017-16025MEDIUM5.9ten sam vendor
Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4...
CVE-2015-9236MEDIUM5.3ten sam vendor
Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned...