CVE-2026-48022
1 advisory.
npm/@hapi/wreck CVE-2026-48022: medium 6.5
@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects
Action: Upgrade @hapi/wreck to 18.1.2 or later.
npm i @hapi/wreck@18.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.1.2 | - |
Fixed versions
| 18.1.2 |
Sources
- osv: GHSA-x426-x7cc-3fpc
- https://github.com/hapijs/wreck/security/advisories/GHSA-x426-x7cc-3fpc
- https://github.com/hapijs/wreck/commit/b93323b63ad3adb14d2b4019d77219182211641e
- https://github.com/hapijs/wreck
CVE-2026-48022 · published · modified · JSON