Scoutsuite versions from 5.14.0_13 up to but not including 5.14.0_18 have a vulnerability where the aiohttp server does not enforce an initial request/header timeout. This allows an attacker to keep an idle connection open indefinitely before sending any data, potentially leading to resource exhaustion. A fix is available in version 5.14.0_18. The recommended mitigation is to use a reverse proxy with sensible keepalive limits, which is advised for all production deployments.