description: call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.
problem types: Improper Input Validation (CWE-20)
affected:
{
product: call node module
vendor: HackerOne
versions:
status: affected, version: >= 2.0.1 <3.0.2
}