CVE-2020-36604: Hapijs Hoek

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function.

Affected products

• Hapijs Hoek: before 8.5.1 (fixed in 8.5.1); from 9.0, before 9.0.3 (fixed in 9.0.3)

Published 2022-09-23. Last modified 2026-06-17.