description: hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.
problem types: Denial of Service (CWE-400)
affected:
{
product: hapi node module
vendor: HackerOne
versions:
status: affected, version: >= 15.0.0 <= 16.1.0
}