https://www.systemtek.co.uk/2018/08/node-js-buffer-alloc-information-disclosure-vulnerability-cve-2018-7166/
Node.js Buffer.alloc() Information Disclosure Vulnerability [CVE-2018-7166]