WS-2020-0019

Versions of @hapi/boom prior t 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser...

CVE-2020-35465

CVE-2020-35465 is rejected and not a security issue; this entry is not in active use.