{"action":"Upgrade hapi to 11.0.0 or later.","affected":[{"fixed":"11.0.0","introduced":"0"}],"component":"hapi","cve_ids":["CVE-2015-9236"],"ecosystem":"npm","epss":0.01516,"exploited":false,"fixed_versions":["11.0.0"],"ghsa_id":"GHSA-vwrf-r5r4-7775","id":"tcs_01M5KGD6CR9P2GA18GN4CFZSAZ","modified_at":"2023-11-08T03:58:04.183550Z","published_at":"2018-06-07T19:43:25Z","references":["https://osv.dev/vulnerability/GHSA-vwrf-r5r4-7775","https://nvd.nist.gov/vuln/detail/CVE-2015-9236","https://github.com/hapijs/hapi/issues/2840","https://github.com/hapijs/hapi/issues/2850","https://github.com/advisories/GHSA-vwrf-r5r4-7775","https://www.npmjs.com/advisories/45"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vwrf-r5r4-7775","url":"https://osv.dev/vulnerability/GHSA-vwrf-r5r4-7775"}],"summary":"Incorrect handling of CORS preflight request headers in hapi"}