Regular Expression Denial of Service

Overview

Versions of hawk prior to 3.1.3, or 4.x prior to 4.1.1 are affected by a regular expression denial of service vulnerability related to excessively long headers and URI’s.

Recommendation

Update to hawk version 4.1.1 or later.

References

• Issue #168
• GitHub Advisory