CVE-2026-44974 | hapijs up to 6.0.1 Content Content.disposition filename unrestricted upload

July 17, 2026 Yanac

A vulnerability categorized as critical has been discovered in hapijs up to 6.0.1. This vulnerability affects the function Content.disposition of the component Content. Executing a manipulation of the argument filename can lead to unrestricted upload.

The identification of this vulnerability is CVE-2026-44974. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More