CVE-2018-12122

It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.

Mitigation

The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.