MAL-2025-26413 Malicious code in mineralogy-hapi-buffer-gulp (npm)

The package mineralogy-hapi-buffer-gulp was found to contain malicious code...

MAL-2025-32023 Malicious code in registry-oauth-vortex-hapi (npm)

The package registry-oauth-vortex-hapi was found to contain malicious code...

MAL-2025-16509 Malicious code in capella-aldebaran-semantic-release-hapi (npm)

The package capella-aldebaran-semantic-release-hapi was found to contain malicious code...

Malicious code in @zalastax/nolb-hapi-j (npm)

The package @zalastax/nolb-hapi-j was found to contain malicious code...

MAL-2025-22178 Malicious code in hapi-event-store (npm)

The package hapi-event-store was found to contain malicious code...

Malicious code in karma-hapi-sedna-testcafe (npm)

The package karma-hapi-sedna-testcafe was found to contain malicious code...

MAL-2025-15881 Malicious code in bluebutton-hapi (npm)

The package bluebutton-hapi was found to contain malicious code...

Malicious code in registry-oauth-vortex-hapi (npm)

The package registry-oauth-vortex-hapi was found to contain malicious code...

Malicious code in supervisor-draco-socketio-hapi (npm)

The package supervisor-draco-socketio-hapi was found to contain malicious code...

MAL-2025-34224 Malicious code in supervisor-draco-socketio-hapi (npm)

The package supervisor-draco-socketio-hapi was found to contain malicious code...

Malicious code in hapi-express-avior-ignite (npm)

The package hapi-express-avior-ignite was found to contain malicious code...

MAL-2025-11923 Malicious code in @zalastax/nolb-hapi-4 (npm)

The package @zalastax/nolb-hapi-4 was found to contain malicious code...

MAL-2025-11934 Malicious code in @zalastax/nolb-hapi-k (npm)

The package @zalastax/nolb-hapi-k was found to contain malicious code...

Denial Of Service (DoS)

@hapi/subtext is vulnerable to Denial Of Service DoS. The vulnerability is due to improper parsing of the Content-Encoding HTTP header, which causes a system error on invalid values and is rethrown up the stack without handling, allowing an attacker to crash the application and shut down services...

graphql-playground

This is a repository for the GraphQL Playground, a development environment for building and testing GraphQL APIs. The repository contains several packages, including GraphQL Playground HTML, GraphQL Playground Express Middleware, GraphQL Playground Koa Middleware, and GraphQL Playground Hapi...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.8.0, <=4.2.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=4.1.0, <=4.2.0) +567 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.4.2.final)

org.hibernate:hibernate-validator MAVEN version 5.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.8.0, =4.1.0, =3.8.0, =3.8.0, =3.8.0, =4.0.0,...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +168 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.0.release)

org.springframework:spring-context MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +1607 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.10.release)

org.springframework:spring-context MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.10.5) +275 more potentially affected by CVE-2024-52981 via org.elasticsearch:elasticsearch (>=7.17.0, <=7.17.23)

org.elasticsearch:elasticsearch MAVEN version =7.17.0, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.0, =6.8.0, =6.4.0, =6.0.0, =6.0.0, =6.0.3, =6.8.0, =1.0, =1.0.0, =6.0.01 and more Source cves: CVE-2024-52981 Source advisory: GHSA-5XM9-X7X4-4J5X...