hapijs/hawk

Releases67

Frequency2 months 20 hours

Last Releaseover 2 years ago

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2016-2515NVD↗	= 4.1.0, = 3.1.2, >= 4.0.0, < 4.1.1, < 3.1.3	Apr 13, 2016Wednesday, 13 April 2016, 16:59	—	7.8 HIGH
Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.