github_osv/GHSA-cqjg-whmm-8gv6
Denial of Service via malformed accept-encoding header in hapi
Affected versions of `hapi` will crash or lock the event loop when a malformed `accept-encoding` header is recieved.
## Recommendation
Update to version 16.1.1 or later.
gitlab/npm/hapi/CVE-2017-16013
Improper Input Validation
When hapi encounters a malformed `accept-encoding` header, an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.