Skip to content

Product

hapi @hapi/subtext vulnerabilities

1 published CVE affecting hapi @hapi/subtext, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest hapi @hapi/subtext CVEs

Newest publication first

  1. GHSA-4rgj-8mq3-hggj Denial of Service in @hapi/subtext

    Published
    Unknown

    Versions of @hapi/subtext prior to 6.1.2 are vulnerable to Denial of Service (DoS). The package fails to enforce the maxBytes configuration for payloads with chunked encoding that are written to the file system. This allows attackers to send requests with arbitrary payload sizes,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.