`@hapi/wreck`

Ecosystem:
npm

Package URL:
pkg:npm/@hapi/wreck

Total PRs:
11 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
10 repositories

Unique Repos (30 days):
9 repositories

Security Advisories

@hapi/wreck leaks sensitive `Proxy-Authorization` header across cross-hostname redirects

GHSA-vhjm-w67q-g75c CVE-2026-44979 MODERATE published about 2 months ago • updated 6 days ago

### Impact When `@hapi/wreck` follows a 3xx redirect to a different hostname, only the `Authorization` and `Cookie` headers are stripped. The stand...

@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects

GHSA-x426-x7cc-3fpc CVE-2026-48022 MODERATE published about 1 month ago • updated 6 days ago

### Impact Wreck strips credential headers (Authorization, Cookie, Proxy-Authorization) before following a cross-origin redirect, but the origin ch...

Recent PRs (filtered by: Minor PRs )

RSS Feed Clear filter

Bump @hapi/wreck from 18.0.1 to 18.1.2

stac-utils/stac-server #1107

18.0.1 → 18.1.2 Minor PR

Closed about 2 months ago 2 comments

Package Details

Name:	`@hapi/wreck`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@hapi/wreck`
JSON API:	View JSON

Security Advisories

2

Active advisories

MODERATE 2

View All npm Advisories

Package Information

Description:

HTTP Client Utilities

Repository:	https://github.com/hapijs/wreck
Homepage:	https://github.com/hapijs/wreck#readme
Latest Release:	`18.1.2` 2 months ago
Dependent Repos:	18,314
Dependent Packages:	102
Downloads:	8,256,008
Ranking:	Top 0.2103% by dependent repos Top 0.1494% by downloads Top 0.3663% by dependent pkgs

PR Status

Open 6 (54.5%)

Merged 0 (0.0%)

Closed 5 (45.5%)

PR Types

Patch 10 (90.9%)