@antodip/tech-utils (>=0.1.0, <=0.1.9), @applicaster/zapp-pipes-dev-kit (>=1.2.2, <=1.2.6) +122 more potentially affected by CVE-2017-16013 via hapi (>=15.0.2, <=16.1.0)

hapi NPM version =15.0.2, =0.1.0, =1.2.2, =1.0.8-rc.1, =1.0.0-alpha.1, =1.1.0, =4.0.0, =1.2.3, =0.1.0, =0.1.0, =0.1.0, =0.9.28, =0.17.44, =1.0.0-quotes.26, =1.0.27, =1.0.29 and more Source cves: CVE-2017-16013 Source advisory: OSV:GHSA-CQJG-WHMM-8GV6...

CVE-2017-16013

The CVE-2017-16013 entry concerns the hapi web framework for Node.js. Affected versions are 15.0.0 through 16.1.0, where receiving a malformed accept-encoding header can trigger an uncaught exception, causing the hapi process to crash or the client connection to hang until timeout. This has been ...