CVE-2026-119202 | hapijs Content up to 6.0.2 Header Parsing Content.disposition infinite loop

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in hapijs Content up to 6.0.2. This vulnerability affects the function Content.disposition of the component Header Parsing. This manipulation causes infinite loop.

This vulnerability is handled as CVE-2026-119202. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More