NodeJS/hapi/11.1.3
HTTP Server framework
https://www.npmjs.com/package/hapi
BSD-3-Clause
3 Security Vulnerabilities
Denial of Service in hapi
All Versions of hapi
are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an attacker to shut down services.
Recommendation
This package is deprecated and is now maintained as @hapi/hapi
. Please update your dependencies to use @hapi/hapi
.
Unsafe Merging of CORS Configuration Conflict in hapi
Versions of hapi
prior to 11.1.4 are affected by a vulnerability that causes route-level CORS configuration to override connection-level or server-level CORS defaults. This may result in a situation where CORS permissions are less restrictive than intended.
Recommendation
Update hapi to version 11.1.4 or later.
Route level CORS config overrides connection level defaults
When server level, connection level or route level CORS configurations are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g. origin defaults to all origins *
).
295 Other Versions
Version | License | Security | Released | |
---|---|---|---|---|
10.4.1 | BSD-3-Clause | 7 | 2015-10-08 - 16:05 | over 8 years |
10.4.0 | BSD-3-Clause | 7 | 2015-10-05 - 22:41 | over 8 years |
10.2.1 | BSD-3-Clause | 7 | 2015-10-03 - 19:33 | over 8 years |
10.1.0 | BSD-3-Clause | 7 | 2015-09-25 - 15:35 | over 8 years |
10.0.1 | BSD-3-Clause | 7 | 2015-09-23 - 01:23 | over 8 years |
10.0.0 | BSD-3-Clause | 7 | 2015-09-11 - 20:47 | over 8 years |
9.5.1 | BSD-3-Clause | 7 | 2016-01-20 - 18:27 | over 8 years |
9.3.1 | BSD-3-Clause | 7 | 2015-09-08 - 19:16 | over 8 years |
9.3.0 | BSD-3-Clause | 7 | 2015-09-06 - 17:34 | over 8 years |
9.2.0 | BSD-3-Clause | 7 | 2015-09-05 - 15:53 | over 8 years |
9.1.0 | BSD-3-Clause | 7 | 2015-09-04 - 05:34 | over 8 years |
9.0.4 | BSD-3-Clause | 7 | 2015-09-02 - 07:51 | over 8 years |
9.0.3 | BSD-3-Clause | 7 | 2015-08-19 - 15:53 | over 8 years |
9.0.2 | BSD-3-Clause | 7 | 2015-08-15 - 23:50 | over 8 years |
9.0.1 | BSD-3-Clause | 7 | 2015-08-12 - 14:55 | almost 9 years |
9.0.0 | BSD-3-Clause | 7 | 2015-08-12 - 06:39 | almost 9 years |
8.8.1 | BSD-3-Clause | 7 | 2015-07-29 - 19:31 | almost 9 years |
8.8.0 | BSD-3-Clause | 7 | 2015-07-03 - 22:44 | almost 9 years |
8.6.1 | BSD-3-Clause | 7 | 2015-06-05 - 12:18 | almost 9 years |
8.6.0 | BSD-3-Clause | 7 | 2015-05-29 - 20:12 | almost 9 years |
8.5.3 | BSD-3-Clause | 7 | 2015-05-29 - 05:55 | almost 9 years |
8.5.2 | BSD-3-Clause | 7 | 2015-05-27 - 05:52 | almost 9 years |
8.5.1 | BSD-3-Clause | 7 | 2015-05-22 - 21:54 | almost 9 years |
8.5.0 | BSD-3-Clause | 7 | 2015-05-21 - 19:22 | almost 9 years |
8.4.0 | BSD | 7 | 2015-03-13 - 18:51 | about 9 years |
8.3.1 | BSD | 7 | 2015-03-11 - 06:36 | about 9 years |
8.3.0 | BSD | 7 | 2015-03-11 - 00:33 | about 9 years |
8.2.0 | BSD | 7 | 2015-02-09 - 21:04 | over 9 years |
8.1.0 | BSD | 7 | 2015-01-06 - 22:31 | over 9 years |
8.0.0 | BSD | 7 | 2014-12-09 - 23:09 | over 9 years |
7.5.3 | BSD | 7 | 2014-12-16 - 02:58 | over 9 years |
7.5.2 | BSD | 7 | 2014-11-10 - 20:23 | over 9 years |
7.5.1 | BSD | 7 | 2014-11-10 - 20:09 | over 9 years |
7.5.0 | BSD | 7 | 2014-11-07 - 22:12 | over 9 years |
7.4.0 | BSD | 7 | 2014-11-07 - 05:03 | over 9 years |
7.3.0 | BSD | 7 | 2014-11-05 - 03:04 | over 9 years |
7.2.0 | BSD | 7 | 2014-10-30 - 23:35 | over 9 years |
7.1.1 | BSD | 7 | 2014-10-24 - 06:20 | over 9 years |
7.1.0 | BSD | 7 | 2014-10-22 - 19:45 | over 9 years |
7.0.1 | BSD | 7 | 2014-10-22 - 19:08 | over 9 years |
7.0.0 | BSD | 7 | 2014-10-10 - 00:26 | over 9 years |
6.11.1 | BSD | 7 | 2014-10-06 - 19:18 | over 9 years |
6.11.0 | BSD | 7 | 2014-10-04 - 06:52 | over 9 years |
6.10.0 | BSD | 7 | 2014-10-02 - 22:15 | over 9 years |
6.9.0 | BSD | 7 | 2014-09-22 - 20:40 | over 9 years |
6.8.1 | BSD | 7 | 2014-09-09 - 21:15 | over 9 years |
6.8.0 | BSD | 7 | 2014-09-09 - 00:54 | over 9 years |
6.7.1 | BSD | 7 | 2014-08-28 - 00:28 | over 9 years |
6.7.0 | BSD | 7 | 2014-08-27 - 23:37 | over 9 years |
6.6.0 | BSD | 7 | 2014-08-24 - 07:02 | over 9 years |
6.5.1 | BSD | 7 | 2014-08-13 - 20:11 | almost 10 years |
6.5.0 | BSD | 7 | 2014-08-13 - 18:48 | almost 10 years |
6.4.0 | BSD | 7 | 2014-08-05 - 01:10 | almost 10 years |
6.3.0 | BSD | 7 | 2014-08-03 - 20:33 | almost 10 years |
6.2.2 | BSD | 7 | 2014-08-01 - 20:12 | almost 10 years |
6.2.1 | BSD | 7 | 2014-07-23 - 14:07 | almost 10 years |
6.2.0 | BSD | 7 | 2014-07-17 - 12:34 | almost 10 years |
6.1.0 | BSD | 7 | 2014-07-16 - 14:26 | almost 10 years |
6.0.2 | BSD | 9 | 2014-06-17 - 07:25 | almost 10 years |
6.0.1 | BSD | 9 | 2014-06-12 - 17:28 | almost 10 years |
6.0.0 | BSD | 9 | 2014-06-12 - 04:54 | almost 10 years |
5.1.0 | BSD | 9 | 2014-05-24 - 23:32 | almost 10 years |
5.0.0 | BSD | 9 | 2014-05-19 - 19:41 | almost 10 years |
4.1.4 | BSD | 9 | 2014-05-17 - 18:35 | almost 10 years |
4.1.3 | BSD | 9 | 2014-05-17 - 08:20 | almost 10 years |
4.1.2 | BSD | 9 | 2014-05-13 - 20:36 | about 10 years |
4.1.1 | BSD | 9 | 2014-05-13 - 17:12 | about 10 years |
4.1.0 | BSD | 9 | 2014-05-01 - 16:38 | about 10 years |
4.0.3 | BSD | 9 | 2014-04-28 - 21:07 | about 10 years |
4.0.2 | BSD | 9 | 2014-04-26 - 00:20 | about 10 years |
4.0.1 | BSD | 9 | 2014-04-25 - 07:39 | about 10 years |
4.0.0 | BSD | 9 | 2014-04-08 - 07:22 | about 10 years |
3.1.0 | BSD | 9 | 2014-03-29 - 08:27 | about 10 years |
3.0.2 | BSD | 9 | 2014-03-22 - 21:22 | about 10 years |
3.0.1 | BSD | 9 | 2014-03-19 - 02:32 | about 10 years |
3.0.0 | BSD | 9 | 2014-03-12 - 23:44 | about 10 years |
2.6.0 | BSD | 9 | 2014-02-25 - 15:48 | about 10 years |
2.5.0 | BSD | 9 | 2014-02-21 - 07:56 | about 10 years |
2.4.0 | BSD | 9 | 2014-02-17 - 06:39 | about 10 years |
2.3.0 | BSD | 9 | 2014-02-13 - 08:08 | about 10 years |
2.2.0 | BSD | 9 | 2014-02-10 - 22:35 | over 10 years |
2.1.2 | BSD | 11 | 2014-01-27 - 08:48 | over 10 years |
2.1.1 | BSD | 11 | 2014-01-21 - 09:11 | over 10 years |
2.1.0 | BSD | 11 | 2014-01-21 - 00:34 | over 10 years |
2.0.0 | BSD | 11 | 2014-01-17 - 09:14 | over 10 years |
2.0.0-preview | BSD | 10 | 2014-01-09 - 08:10 | over 10 years |
1.20.0 | BSD | 9 | 2013-11-24 - 19:45 | over 10 years |
1.19.5 | BSD | 9 | 2013-11-22 - 19:47 | over 10 years |
1.19.4 | BSD | 9 | 2013-11-21 - 08:14 | over 10 years |
1.19.3 | BSD | 9 | 2013-11-19 - 22:03 | over 10 years |
1.19.2 | BSD | 9 | 2013-11-19 - 21:42 | over 10 years |
1.19.1 | BSD | 9 | 2013-11-19 - 21:29 | over 10 years |
1.19.0 | BSD | 9 | 2013-11-19 - 07:46 | over 10 years |
1.18.0 | BSD | 9 | 2013-11-18 - 19:53 | over 10 years |
1.17.0 | BSD | 9 | 2013-11-15 - 17:45 | over 10 years |
1.16.1 | BSD | 9 | 2013-11-09 - 08:55 | over 10 years |
1.16.0 | BSD | 9 | 2013-11-07 - 00:51 | over 10 years |
1.15.0 | BSD | 9 | 2013-10-30 - 19:52 | over 10 years |
1.14.0 | BSD | 9 | 2013-10-04 - 20:32 | over 10 years |
1.13.0 | BSD | 9 | 2013-10-02 - 14:57 | over 10 years |