hapijs content

• CVE-2026-119202 High 7.5 @hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service 0.4%
• CVE-2026-44974 High 7.7 Parameter smuggling in @hapi/content header parser allows upload-filter bypass via duplicate parameters 0.5%
• CVE-2026-35213 High 8.7 Regular Expression Denial of Service (ReDoS) in @hapi/content HTTP header parsing 0.3%