{"action":"Upgrade hapi to 16.1.1 or later.","affected":[{"fixed":"16.1.1","introduced":"15.0.0"}],"component":"hapi","cve_ids":["CVE-2017-16013"],"ecosystem":"npm","epss":0.01559,"exploited":false,"fixed_versions":["16.1.1"],"ghsa_id":"GHSA-cqjg-whmm-8gv6","id":"tcs_01M5KFKBQMP2SC5G4S655WXAVW","modified_at":"2023-11-08T03:58:59.647182Z","published_at":"2018-10-09T00:57:28Z","references":["https://osv.dev/vulnerability/GHSA-cqjg-whmm-8gv6","https://nvd.nist.gov/vuln/detail/CVE-2017-16013","https://github.com/hapijs/hapi/issues/3466","https://github.com/advisories/GHSA-cqjg-whmm-8gv6","https://www.npmjs.com/advisories/335"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqjg-whmm-8gv6","url":"https://osv.dev/vulnerability/GHSA-cqjg-whmm-8gv6"}],"summary":"Denial of Service via malformed accept-encoding header in hapi"}