https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:17:08.539992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-25053 cnvd-2018-25053 2026-10-03T21:17:08.614055+00:00 cnvd-2018-25053 https://cve.radiocsirt.org/vuln/euvd-2026-185239 EUVD-2026-185239 2026-10-03T21:17:08.614098+00:00 EUVD-2026-185239 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16013 fkie_cve-2017-16013 2026-10-03T21:17:08.614113+00:00

hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.

 https://cve.radiocsirt.org/vuln/ghsa-cqjg-whmm-8gv6 GHSA-cqjg-whmm-8gv6 — Denial of Service via malformed accept-encoding header in hapi 2026-10-03T21:17:08.614145+00:00

Affected: npm: hapi

Affected versions of `hapi` will crash or lock the event loop when a malformed `accept-encoding` header is recieved.

## Recommendation

Update to version 16.1.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-16013 gsd-2017-16013 2026-10-03T21:17:08.614171+00:00 gsd-2017-16013