Hapijs Hoek — known CVE vulnerabilities

Every CVE whose affected-product data names Hapijs Hoek, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-3728 — CVSS 8.8 (high): hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge'…
• CVE-2020-36604 — CVSS 8.1 (high): hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.