GMS-2017-123: Denial of Service via malformed accept-encoding header

April 5, 2017

When hapi encounters a malformed accept-encoding header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.

References

github.com/hapijs/hapi/issues/3466

Detect and mitigate GMS-2017-123 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →