Skip to content

Product

npm hawk vulnerabilities

2 published CVES affecting npm hawk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm hawk CVEs

Newest publication first

  1. CVE-2022-29167 ReDoS vulnerability in header parsing in hawk

    Published
    HighCVSS 7.5 EPSS 1.1%

    Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression t...

  2. CVE-2016-2515 Regular Expression Denial of Service in hawk

    Published
    HighCVSS 7.5 EPSS 3.4%

    Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.