HighCVSS 8.1
EPSS 1.2%
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.
Product
hapi @hapi/hoek vulnerabilities
2 published CVES affecting hapi @hapi/hoek, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 1
- CISA KEV
- 0
Latest hapi @hapi/hoek CVEs
Newest publication first
-
-
Unknown
Versions of @hapi/hoek prior to 8.5.1 and 9.0.3 are vulnerable to Prototype Pollution. The clone function fails to prevent the modification of the Object prototype when passed specially-crafted input. Attackers may use this to change existing properties that exist in all objects,...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.