CVE-2018-3728
1 advisory.
npm/hoek CVE-2018-3728: high 8.8
Prototype Pollution in hoek
Action: Upgrade hoek to 4.2.1 or later.
npm i hoek@5.0.3npm i hoek@4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
| 0 | 4.2.1 | - |
Fixed versions
| 5.0.3 | 4.2.1 |
Sources
- osv: GHSA-jp4x-w63m-7wgm
- https://nvd.nist.gov/vuln/detail/CVE-2018-3728
- https://github.com/hapijs/hoek/commit/32ed5c9413321fbc37da5ca81a7cbab693786dee
- https://github.com/hapijs/hoek/commit/5aed1a8c4a3d55722d1c799f2368857bf418d6df
- https://hackerone.com/reports/310439
- https://access.redhat.com/errata/RHSA-2018:1263
- https://access.redhat.com/errata/RHSA-2018:1264
- https://github.com/hapijs/hoek
- https://snyk.io/vuln/npm:hoek:20180212
- https://web.archive.org/web/20200227131737/https://www.securityfocus.com/bid/103108
CVE-2018-3728 · published · modified · JSON