h3 vulnerabilities (npm)
9 vulnerabilities.
-
h3npm h3 before 2.0.1-rc.18 Open Redirect via redirectBack() 5.3 Medium -
h3npm h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie 8.7 High -
h3npm h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes 3.7 Low -
h3npm h3 before 1.15.9 Path Traversal via Double Decoding 8.2 High -
h3npm h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments 8.2 High -
h3npm h3 has a middleware bypass with one gadget 7.4 High -
h3npm h3 has an observable timing discrepancy in basic auth utils 5.9 Medium -
h3npm h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields 7.5 High -
h3npm h3 v1 has Request Smuggling (TE.TE) issue 8.9 High