CVE-2015-9241

CVE-2015-9241 describes a denial-of-service vulnerability affecting the hapijs hapi node module prior to version 11.1.3. Malicious input in the If-Modified-Since or Last-Modified HTTP headers triggers an "illegal access" exception, causing the server to hold the socket open until timeout instead of returning an HTTP 500 error. This vulnerability has a CVSS v3 score of 7.5 (High), indicating a network-based attack with low complexity that can lead to high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat.