hawk
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting hawkpage 1 of 1
- CVE-2016-2515HIGHCVSS 7.5EG 7.5✓ Fixed in 3.1.32016-04-13
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.
- CVE-2022-29167HIGHCVSS 7.4EG 7.4✓ Fixed in 9.0.12022-05-05
Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request …
Check whether hawk is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for hawk CVEs against the assets you own.
Start Free Scan →