npm/hapi CVE-2017-16013: high 7.5, EPSS 1.56%

Denial of Service via malformed accept-encoding header in hapi

Action: Upgrade hapi to 16.1.1 or later.

npm i hapi@16.1.1

Affected

Fixed versions

Sources

• osv: GHSA-cqjg-whmm-8gv6
• https://nvd.nist.gov/vuln/detail/CVE-2017-16013
• https://github.com/hapijs/hapi/issues/3466
• https://github.com/advisories/GHSA-cqjg-whmm-8gv6
• https://www.npmjs.com/advisories/335

CVE-2017-16013 · published 2018-10-09T00:57:28Z · modified 2023-11-08T03:58:59.647182Z · JSON