MAL-2025-11923 Malicious code in @zalastax/nolb-hapi-4 (npm)

The package @zalastax/nolb-hapi-4 was found to contain malicious code...

MAL-2025-22187 Malicious code in hapi-services (npm)

The package hapi-services was found to contain malicious code...

MAL-2025-34224 Malicious code in supervisor-draco-socketio-hapi (npm)

The package supervisor-draco-socketio-hapi was found to contain malicious code...

MAL-2025-22179 Malicious code in hapi-express-avior-ignite (npm)

The package hapi-express-avior-ignite was found to contain malicious code...

MAL-2025-11924 Malicious code in @zalastax/nolb-hapi-a (npm)

The package @zalastax/nolb-hapi-a was found to contain malicious code...

MAL-2025-15894 Malicious code in blueshift-hapi-blaze-atlas (npm)

The package blueshift-hapi-blaze-atlas was found to contain malicious code...

MAL-2025-22182 Malicious code in hapi-logstash-tester (npm)

The package hapi-logstash-tester was found to contain malicious code...

MAL-2025-22188 Malicious code in hapi-slidev-mesosphere-standard (npm)

The package hapi-slidev-mesosphere-standard was found to contain malicious code...

MAL-2025-22178 Malicious code in hapi-event-store (npm)

The package hapi-event-store was found to contain malicious code...

MAL-2025-27526 Malicious code in nightwatch-steganography-hapi-warp (npm)

The package nightwatch-steganography-hapi-warp was found to contain malicious code...

Malicious code in registry-oauth-vortex-hapi (npm)

The package registry-oauth-vortex-hapi was found to contain malicious code...

MAL-2025-11930 Malicious code in @zalastax/nolb-hapi-g (npm)

The package @zalastax/nolb-hapi-g was found to contain malicious code...

Malicious code in @zalastax/nolb-hapi-4 (npm)

The package @zalastax/nolb-hapi-4 was found to contain malicious code...

Malicious code in hapi-slidev-mesosphere-standard (npm)

The package hapi-slidev-mesosphere-standard was found to contain malicious code...

Denial Of Service (DoS)

@hapi/subtext is vulnerable to Denial Of Service DoS. The vulnerability is due to improper parsing of the Content-Encoding HTTP header, which causes a system error on invalid values and is rethrown up the stack without handling, allowing an attacker to crash the application and shut down services...

graphql-playground

This is a repository for the GraphQL Playground, a development environment for building and testing GraphQL APIs. The repository contains several packages, including GraphQL Playground HTML, GraphQL Playground Express Middleware, GraphQL Playground Koa Middleware, and GraphQL Playground Hapi...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ai.ylyue:yue-library-data-es (>=j11.2.6.0 <=j11.2.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0 <=6.10.5) +579 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (>=7.0.0-alpha1 <=7.17.24)

org.elasticsearch:elasticsearch MAVEN version =7.0.0-alpha1, =j11.2.6.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.10.0, =6.10.0, =6.10.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2024-52979 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-9919796...

ai.ylyue:yue-library-data-es (>=j11.2.6.0 <=j11.2.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0 <=6.10.5) +517 more potentially affected by CVE-2024-52979 via org.elasticsearch.plugin:lang-mustache-client (>=7.0.0-alpha1 <=7.17.24)

org.elasticsearch.plugin:lang-mustache-client MAVEN version =7.0.0-alpha1, =j11.2.6.0, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.10.0, =6.10.0, =6.10.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.6.5, =5.7.9 and more Source cves: CVE-2024-52979 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.10.0 <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.10.0 <=6.10.5) +144 more potentially affected by CVE-2024-52981 via org.elasticsearch:elasticsearch (>=7.17.0 <=7.17.23)

org.elasticsearch:elasticsearch MAVEN version =7.17.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =6.10.0, =1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =6.0.01 - cn.dev8:ktmyoql-code-generator =1.4 and more Source cves: CVE-2024-52981 Source advisory: OSV:GHSA-5XM9-X7X4-4J5X...