VDB
Sign up
HIGH7.5

GHSA-cqjg-whmm-8gv6

Denial of Service via malformed accept-encoding header in hapi

Quick fix

GHSA-cqjg-whmm-8gv6 — hapi: upgrade to the fixed version with the command below.

npm install hapi@16.1.1

Details

Affected versions of `hapi` will crash or lock the event loop when a malformed `accept-encoding` header is recieved.

## Recommendation

Update to version 16.1.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/hapi
Introduced in: 15.0.0Fixed in: 16.1.1
Fixnpm install hapi@16.1.1

References