`@hapi/wreck`

Ecosystem:
npm

Package URL:
pkg:npm/@hapi/wreck

Total PRs:
11 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
10 repositories

Unique Repos (30 days):
9 repositories

Security Advisories

@hapi/wreck leaks sensitive `Proxy-Authorization` header across cross-hostname redirects

GHSA-vhjm-w67q-g75c CVE-2026-44979 MODERATE published about 2 months ago • updated 5 days ago

### Impact When `@hapi/wreck` follows a 3xx redirect to a different hostname, only the `Authorization` and `Cookie` headers are stripped. The stand...

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

GHSA-x426-x7cc-3fpc CVE-2026-48022 MODERATE published about 1 month ago • updated 5 days ago

### Impact Wreck strips credential headers (Authorization, Cookie, Proxy-Authorization) before following a cross-origin redirect, but the origin ch...

Recent PRs

feat(deps): Bump the npm_and_yarn group across 27 directories with 14 updates

SherfeyInv/sentry-javascript #264

18.1.0 → 18.1.2 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @hapi/wreck from 18.1.1 to 18.1.2 in /api in the npm_and_yarn group across 1 directory

annemarie35/memoires-en-transit #44

18.1.1 → 18.1.2 Patch PR

Open about 1 month ago 1 comment

feat(deps): Bump the npm_and_yarn group across 24 directories with 11 updates

SherfeyInv/sentry-javascript #259

18.1.0 → 18.1.2 Patch PR

Closed about 1 month ago 2 comments

Bump @hapi/wreck from 18.1.0 to 18.1.2

DEFRA/forms-submission-api #524

18.1.0 → 18.1.2 Patch PR

Open about 2 months ago 1 comment

Chore(deps): Bump @hapi/wreck from 18.1.0 to 18.1.2

DEFRA/forms-runner #1214

18.1.0 → 18.1.2 Patch PR

Open about 2 months ago 1 comment

Bump @hapi/wreck from 18.1.0 to 18.1.2 in /mcp_servers/mongodb

Sherlock999xxx/klavis #97

18.1.0 → 18.1.2 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

DEFRA/fcp-audit-publisher-stub #17

18.1.0 → 18.1.2 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

DEFRA/fcp-mpdp-backend #35

18.1.0 → 18.1.2 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

DEFRA/fcp-fdm-event-publisher-stub #21

18.1.0 → 18.1.2 Patch PR

Closed about 2 months ago 2 comments

Bump @hapi/wreck from 18.0.1 to 18.1.2

stac-utils/stac-server #1107

18.0.1 → 18.1.2 Minor PR

Closed about 2 months ago 2 comments

Bump @hapi/wreck from 18.1.0 to 18.1.1

DEFRA/flood-data #178

18.1.0 → 18.1.1 Patch PR

Closed 3 months ago 1 comment

Package Details

Name:	`@hapi/wreck`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hapi/wreck`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All npm Advisories

Package Information

Description:

HTTP Client Utilities

Repository:	https://github.com/hapijs/wreck
Homepage:	https://github.com/hapijs/wreck#readme
Latest Release:	`18.1.2` 2 months ago
Dependent Repos:	18,314
Dependent Packages:	102
Downloads:	8,256,008
Ranking:	Top 0.2103% by dependent repos Top 0.1494% by downloads Top 0.3663% by dependent pkgs

PR Status

Open 6 (54.5%)

Merged 0 (0.0%)

Closed 5 (45.5%)

PR Types

Patch 10 (90.9%)