Skip to content
OpenAdvisories

Product · HackerOne

hapi node module

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2017-16013

    Denial of Service via malformed accept-encoding header in hapi

    hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.

    HackerOne hapi node module hapi npm
  • High —
    CVE-2015-9241

    Denial of Service in hapi

    Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until …

    HackerOne hapi node module hapi npm