Hyper vulnerabilities
We track 3 vulnerabilities in Hyper products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 28, 2024.
3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score
Latest Hyper vulnerabilities
- 9.8 Critical severity
hyper: Improper Control of Generation of Code
An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.
- 7.5 High severity
H2: Allocation of Resources Without Limits or Throttling
An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS).
- 7.5 High severity
Hyper: Allocation of Resources Without Limits or Throttling
Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.