GHSA-7hx8-2rxv-66xv

Suggest an improvement
Source
https://github.com/advisories/GHSA-7hx8-2rxv-66xv
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-7hx8-2rxv-66xv/GHSA-7hx8-2rxv-66xv.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7hx8-2rxv-66xv
Published
2020-09-03T15:48:00Z
Modified
2020-08-31T19:00:54Z
Summary
Denial of Service in hapi
Details

All Versions of hapi are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an attacker to shut down services.

Recommendation

This package is deprecated and is now maintained as @hapi/hapi. Please update your dependencies to use @hapi/hapi.

Database specific 
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-08-31T19:00:54Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}
References

Affected packages

npm / hapi

Package

Name
hapi
View open source insights on deps.dev
Purl
pkg:npm/hapi

Affected ranges

Type
SEMVER
Events
Introduced
0.0.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-7hx8-2rxv-66xv/GHSA-7hx8-2rxv-66xv.json"