Tag

hoek

Safeguard articles tagged "hoek" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2018-3728: Prototype pollution in hoek

CVE-2018-3728 is a prototype pollution flaw in Hoek's merge functions, exposing hapi.js and Joi-based apps to __proto__ injection. Here's the impact, fix, and remediation path.

Oct 16, 20257 min read