@mojaloop/central-services-health (9.1.0) potentially affected by unknown CVE via @hapi/hapi (19.1.0)

@hapi/hapi NPM version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hapi and may be impacted: - @mojaloop/central-services-health 9.1.0 Source cves: unknown CVE Source advisory: MEND:WS-2020-0036...

WS-2020-0036

Versions of @hapi/hapi prior to 18.4.1 or 19.1.1 are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will...

3nit-utils (0.24.0), @cloudinary/mediaflows-cli (>=0.0.23-beta, <=0.0.28) +40 more potentially affected by unknown CVE via @hapi/hapi (>=17.9.0, <=18.4.0)

@hapi/hapi NPM version =17.9.0, =0.0.23-beta, =0.4.0, =7.4.0, =7.0.0, =8.5.0-snapshot, =0.1.0, =0.7.0, =2.12.6, =1.8.0, =1.8.0, =3.1.0, =3.2.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2020-0036...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) potentially affected by unknown CVE via @hapi/ammo (4.0.1)

@hapi/ammo NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/ammo and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =19.0.4 Source cves: unknown CVE Source advisory: MEND:WS-2020-0028...

EUVD-2019-0315

Malware in sbrugna...

PT-2021-3185

Name of the Vulnerable Software and Affected Versions @hapi/hapi affected versions not specified Description The issue is related to an uncontrolled resource consumption in the @hapi/hapi library of the Avrora Center application software. Exploitation of this issue may allow an attacker to cause ...

Denial Of Service (DoS)

@hapi/hapi is vulnerable to denial of service. The CORS request handler causes the function to throw a system error if the header contains certain invalid values...

3nit-utils (0.24.0), @cloudinary/mediaflows-cli (>=0.0.23-beta, <=0.0.28) +29 more potentially affected by unknown CVE via @hapi/hapi (>=18.3.1, <=18.4.0)

@hapi/hapi NPM version =18.3.1, =0.0.23-beta, =7.4.0, =7.0.0, =8.5.0-snapshot, =0.1.0, =0.7.0, =2.12.6, =1.8.0, =1.8.0, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: GHSA-23VW-MHV5-GRV5...

Denial of Service in @hapi/hapi

Versions of @hapi/hapi prior to 18.4.1 or 19.1.1 are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will...

@mojaloop/central-services-health (9.1.0) potentially affected by unknown CVE via @hapi/hapi (19.1.0)

@hapi/hapi NPM version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/hapi and may be impacted: - @mojaloop/central-services-health 9.1.0 Source cves: unknown CVE Source advisory: GHSA-23VW-MHV5-GRV5...

GHSA-23VW-MHV5-GRV5 Denial of Service in @hapi/hapi

Versions of @hapi/hapi prior to 18.4.1 or 19.1.1 are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will...

3nit-utils (0.24.0), @cloudinary/mediaflows-cli (>=0.0.23-beta, <=0.0.28) +29 more potentially affected by unknown CVE via @hapi/hapi (>=18.3.1, <=18.4.0)

@hapi/hapi NPM version =18.3.1, =0.0.23-beta, =7.4.0, =7.0.0, =8.5.0-snapshot, =0.1.0, =0.7.0, =2.12.6, =1.8.0, =1.8.0, =0.0.1, =1.0.0, =1.0.0, =2.0.0, =2.0.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-23VW-MHV5-GRV5...

GHSA-7HX8-2RXV-66XV Denial of Service in hapi

All Versions of hapi are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an attacker...

Denial of Service in hapi

All Versions of hapi are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an attacker...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) potentially affected by unknown CVE via @hapi/ammo (4.0.1)

@hapi/ammo NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/ammo and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =19.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-GJPH-XF5Q-6MFQ...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) potentially affected by unknown CVE via @hapi/ammo (4.0.1)

@hapi/ammo NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/ammo and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =19.0.4 Source cves: unknown CVE Source advisory: GHSA-GJPH-XF5Q-6MFQ...

@commercial/hapi (19.0.2), @hapi/hapi (>=19.0.0, <=19.0.4) +7 more potentially affected by unknown CVE via @hapi/accept (4.0.1)

@hapi/accept NPM version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/accept and may be impacted: - @commercial/hapi 19.0.2 - @hapi/hapi =19.0.0, =0.0.3, =0.27.0, =0.27.0, =0.9.0, =2.0.4, =5.0.2 Source cves: unknown CVE Source advisory:...

PT-2020-20946

Name of the Vulnerable Software and Affected Versions @hapi/hapi versions prior to 18.4.1 @hapi/hapi versions prior to 19.1.1 Description The issue affects the CORS request handler, which can throw a system error if the header contains invalid values. If there is no unhandled exception handler,...