CO
Product
content
by hapijs · last CVE Oct 29, 2026
3
CVEs
0
On KEV
7.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch

Add content to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44974
7.7
0%
Jul 17
Parameter smuggling in @hapi/content header parser allows upload-filter bypass via duplicate parameters
Affected: < 6.0.2
CVE-2026-119202
New
7.5–Oct 29
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
Affected: < 6.0.3
CVE-2026-35213
7.5
0%
Apr 6
Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing
Affected: < 6.0.1
Showing 3