Skip to content

Commit 31edaf3

Browse files
committed
1 parent cd67314 commit 31edaf3

File tree

1 file changed

+12
-5
lines changed

1 file changed

+12
-5
lines changed

advisories/github-reviewed/2020/09/GHSA-5854-jvxx-2cg9/GHSA-5854-jvxx-2cg9.json

Lines changed: 12 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,31 +1,38 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5854-jvxx-2cg9",
4-
"modified": "2020-08-31T19:00:47Z",
4+
"modified": "2023-01-09T05:04:12Z",
55
"published": "2020-09-03T15:46:57Z",
66
"aliases": [],
7-
"summary": "Denial of Service in subtext",
8-
"details": "Versions of `subtext` >=4.1.0 are vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors (as opposed to catching expected application errors), the error is thrown all the way up the stack. If no unhandled exception handler is available, the application will exist, allowing an attacker to shut down services.\n\n\n## Recommendation\n\nThis package is deprecated and is now maintained as `@hapi/subtext`. Please update your dependencies to use `@hapi/subtext`. ",
7+
"summary": "Denial of Service in content",
8+
"details": "Versions of `content` are vulnerable to Denial of Service. The Content-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors (as opposed to catching expected application errors), the error is thrown all the way up the stack. If no unhandled exception handler is available, the application will exist, allowing an attacker to shut down services.\n\n\n## Recommendation\n\nThis package is deprecated and is now maintained as `@hapi/content`. Please update your dependencies to use `@hapi/content`. ",
99
"severity": [],
1010
"affected": [
1111
{
1212
"package": {
1313
"ecosystem": "npm",
14-
"name": "subtext"
14+
"name": "content"
1515
},
1616
"ranges": [
1717
{
1818
"type": "ECOSYSTEM",
1919
"events": [
2020
{
21-
"introduced": "4.1.0"
21+
"introduced": "0"
22+
},
23+
{
24+
"fixed": "4.1.1"
2225
}
2326
]
2427
}
2528
]
2629
}
2730
],
2831
"references": [
32+
{
33+
"type": "WEB",
34+
"url": "https://github.com/hapijs/content/compare/v4.1.0...v4.1.1"
35+
},
2936
{
3037
"type": "WEB",
3138
"url": "https://www.npmjs.com/advisories/1478"

0 commit comments

Comments
 (0)