TI-2017-11738 CVE-2017-16013 · GHSA-cqjg-whmm-8gv6
Uncontrolled resource consumption in HackerOne hapi node module
Priority LOW 36
hapi is a web and services application framework.
Vulnerabilities
4 records
TI-2015-07616 CVE-2015-9236 · GHSA-vwrf-r5r4-7775
Improper access control in HackerOne hapi node module
Priority LOW 27
Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden.
TI-2015-07622 CVE-2015-9243 · GHSA-j3g2-m5jj-6336
Improper access control in HackerOne hapi node module
Priority LOW 28
When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config tha…
TI-2015-07620 CVE-2015-9241 · GHSA-rc8h-3fv6-pxv8
Uncontrolled resource consumption in HackerOne hapi node module
Priority LOW 37
Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised.