Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-16013

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cqjg-whmm-8gv6

Denial of Service via malformed accept-encoding header in hapi Affected versions of `hapi` will crash or lock the event loop when a malformed `accept-encoding` header is recieved. ## Recommendation Update to version 16.1.1 or later.

gitlab/npm/hapi/CVE-2017-16013

Improper Input Validation When hapi encounters a malformed `accept-encoding` header, an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.