It was found that specially crafted long headers or uris can cause a minor denial of service.
Created nodejs-hawk tracking bugs for this issue:
Affects: fedora-all [bug 1309722]
Affects: epel-all [bug 1309723]
Red Hat Product Security has rated this issue as having Low security impact. Additionally nodejs-hawk is only present as a BuildRequires dependency in the nodejs-request package, the actual hawk functionality is not used in OpenShift Enterprise 3. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.