Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

h3

npm

Minimal H(TTP) framework built for high performance and portability.

View on github.com · View on npmjs.org

Security Advisories for h3 in npm

Moderate
5 months ago

H3 has an Open Redirect via Protocol-Relative Path in redirectBack() Referer Validation GSA_kwCzR0hTQS1mcDR4LWdncmYtd21jNs4ABUDb

npm h3
Moderate
5 months ago

H3: Unbounded Chunked Cookie Count in Session Cleanup Loop may Lead to Denial of Service GSA_kwCzR0hTQS1xNXByLTcycHEtODN2M84ABUDa

npm h3
Moderate
5 months ago

h3: SSE Event Injection via Unsanitized Carriage Return (`\r`) in EventStream Data and Comment Fields (Bypass of CVE Fix) GSA_kwCzR0hTQS00aHhjLTkzODQtbTM4Nc4ABT7r

npm h3
Low
5 months ago

h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes GSA_kwCzR0hTQS0yajZxLXdodjItZ2g2d84ABT7q

npm h3
Moderate
5 months ago

h3: Double Decoding in `serveStatic` Bypasses `resolveDotSegments` Path Traversal Protection via `%252e%252e` GSA_kwCzR0hTQS03MmdyLXFmcDctdndod84ABT7p

npm h3
Moderate
5 months ago

h3 has a Path Traversal via Percent-Encoded Dot Segments in serveStatic Allows Arbitrary File Read GSA_kwCzR0hTQS13cjRoLXY4N3ctcDNyN84ABTzy

npm h3
High
5 months ago

h3 has a middleware bypass with one gadget GSA_kwCzR0hTQS0zdmo4LWpteHEtY2dqNc4ABTzx

npm h3
Moderate
5 months ago

h3 has an observable timing discrepancy in basic auth utils GSA_kwCzR0hTQS0yNmY1LThoMngtMzR4aM4ABTzw

npm h3
High
5 months ago

h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fields GSA_kwCzR0hTQS0yMmNjLXAzYzYtd3B2bc4ABTzv

npm h3
High
7 months ago

h3 v1 has Request Smuggling (TE.TE) issue GSA_kwCzR0hTQS1tcDJnLTl2ZzktZjRjZ84ABRIs

npm h3

Filter by Severity

Moderate 6 High 3 Low 1