hapi vulnerabilities

HTTP Server framework

Registry
npm
Latest
18.1.0
License
BSD-3-Clause
Source
github.com/hapijs/hapi (opens the source repository in a new tab)

7 known advisories

The latest version, 18.1.0, is affected by 1 of them.

Security advisories for hapi

  • HighGHSA-7hx8-2rxv-66xv3 Sept 2020

    Denial of Service in hapi

    Affected
    >=0.0.0
    Fixed in
    No fix released
  • MediumGHSA-j3g2-m5jj-63361 Sept 2020

    Unsafe Merging of CORS Configuration Conflict in hapi

    Affected
    <11.1.4
    Fixed in
    11.1.4
  • MediumGHSA-363h-vj6q-3cmj31 Aug 2020

    Rosetta-Flash JSONP Vulnerability in hapi

    Affected
    <6.1.0
    Fixed in
    6.1.0
  • HighGHSA-cqjg-whmm-8gv69 Oct 2018

    Denial of Service via malformed accept-encoding header in hapi

    Affected
    >=15.0.0 <16.1.1
    Fixed in
    16.1.1
  • MediumGHSA-vwrf-r5r4-77757 Jun 2018

    Incorrect handling of CORS preflight request headers in hapi

    Affected
    <11.0.0
    Fixed in
    11.0.0
  • HighGHSA-rc8h-3fv6-pxv87 Jun 2018

    Denial of Service in hapi

    Affected
    <11.1.3
    Fixed in
    11.1.3
  • HighGHSA-cqr7-78pj-3g7j24 Oct 2017

    File Descriptor Leak Can Cause DoS Vulnerability in hapi

    Affected
    >=2.0.0 <2.2.0
    Fixed in
    2.2.0

Which of your client projects still run an old hapi?

NPMscan reads the package-lock.json, yarn.lock and pnpm-lock.yaml in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.

Scan a project free, no signupOr connect GitHub to scan every repo

Other npm packages

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the npm registry.