CVE-2014-3742: Undefined Security Weakness

The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service file descriptor consumption and process crash via unspecified vectors...

PT-2014-5477

Name of the Vulnerable Software and Affected Versions hapi server framework versions 2.0.x through 2.1.x Description The issue allows remote attackers to cause a denial of service via unspecified vectors, resulting in file descriptor consumption and process crash. This is due to a file descriptor...

WS-2020-0019

Versions of @hapi/boom prior t 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser...

CVE-2020-35465

CVE-2020-35465 is rejected and not a security issue; this entry is not in active use.