Description
call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | call node module | >= 2.0.1 <3.0.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | call | >= 2.0.1, < 3.0.2 | 3.0.2 | GHSA-84fv-prrc-5ggr |