CVE-2019-5739

CVE-2019-5739 describes a denial-of-service vulnerability in Node.js keep-alive handling where HTTP/HTTPS connections could stay open up to 2 minutes on affected versions (Node.js ≤6.16.0). The issue is mitigated by Node.js 6.17.0+ introducing server.keepAliveTimeout (default 5 seconds); Node.js ...