hapijs/hoek
GitHub
Releases141
Frequency1 month 1 day
Last Release
Stars483
Node utilities shared among the extended hapi universe
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 8.5.1, >= 9.0, < 9.0.3, <= 6.1.3 | 8.1 HIGH | — | ||
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function. | ||||
| < 4.2.0, >= 5.0.0, < 5.0.3, < 4.2.1 | — | 6.5 MEDIUM | ||
hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. | ||||