hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HHapijs Hoek
APPHapijs< 4.2.05.0.0 – 5.0.3 (bez)
Related vulnerabilities
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.
hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept...
Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' except...
Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4...
Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned...