npm

Severity: moderate

Denial of Service via malformed accept-encoding header

hapi

Overview

Affected versions of hapi will crash or lock the event loop when a malformed accept-encoding header is recieved.

Remediation

Update to version 16.1.1 or later.

Resources

Have content suggestions? Send them to [email protected]

Advisory timeline

  1. published

    Advisory published
    Apr 5th, 2017
  2. reported

    Initial report by Georgios Andrianakis
    Mar 31st, 2017