Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.
{ "binaries": [ { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs" }, { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs-dbg" }, { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs-dbgsym" }, { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs-dev" }, { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs-dev-dbgsym" }, { "binary_version": "4.2.6~dfsg-1ubuntu4.2+esm2", "binary_name": "nodejs-legacy" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "2.7.1-2ubuntu0.1", "binary_name": "libhttp-parser-dev" }, { "binary_version": "2.7.1-2ubuntu0.1", "binary_name": "libhttp-parser2.7.1" }, { "binary_version": "2.7.1-2ubuntu0.1", "binary_name": "libhttp-parser2.7.1-dbgsym" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "8.10.0~dfsg-2ubuntu0.4+esm2", "binary_name": "nodejs" }, { "binary_version": "8.10.0~dfsg-2ubuntu0.4+esm2", "binary_name": "nodejs-dbgsym" }, { "binary_version": "8.10.0~dfsg-2ubuntu0.4+esm2", "binary_name": "nodejs-dev" }, { "binary_version": "8.10.0~dfsg-2ubuntu0.4+esm2", "binary_name": "nodejs-doc" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "libnode-dev" }, { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "libnode64" }, { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "libnode64-dbgsym" }, { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "nodejs" }, { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "nodejs-dbgsym" }, { "binary_version": "10.19.0~dfsg-3ubuntu1.1", "binary_name": "nodejs-doc" } ], "availability": "No subscription required" }