Vulnerabilities > Hapijs > Hapi > 11.1.3

DATE CVE VULNERABILITY TITLE RISK
2018-05-29 CVE-2015-9243 7PK - Security Features vulnerability in Hapijs Hapi
When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g.
network
high complexity
hapijs CWE-254
5.9