PT-2023-4497

Name of the Vulnerable Software and Affected Versions Node.js versions v16 through v20 Description The issue is related to the llhttp parser in the http module, which does not strictly use the CRLF sequence to delimit HTTP requests, leading to HTTP Request Smuggling HRS. The CR character without ...