Content Project Content — known CVE vulnerabilities

Every CVE whose affected-product data names Content Project Content, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-16111 — CVSS 7.5 (high): The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The…
• CVE-2026-35213 — CVSS 7.5 (high): @hapi/content provided HTTP Content-* headers parsing. All versions of @hapi/content through 6.0.0 are vulnerable to Regular Expression…