GMS-2020-27: Denial of Service in @hapi/hapi
Versions of @hapi/hapi
are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist, allowing an attacker to shut down services.
References
Code Behaviors & Features
Detect and mitigate GMS-2020-27 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →