Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "nodejs-dbg": "4.2.6~dfsg-1ubuntu4.2+esm2", "nodejs-dev": "4.2.6~dfsg-1ubuntu4.2+esm2", "nodejs-dev-dbgsym": "4.2.6~dfsg-1ubuntu4.2+esm2", "nodejs": "4.2.6~dfsg-1ubuntu4.2+esm2", "nodejs-legacy": "4.2.6~dfsg-1ubuntu4.2+esm2", "nodejs-dbgsym": "4.2.6~dfsg-1ubuntu4.2+esm2" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "nodejs-dev": "8.10.0~dfsg-2ubuntu0.4+esm2", "nodejs-doc": "8.10.0~dfsg-2ubuntu0.4+esm2", "nodejs": "8.10.0~dfsg-2ubuntu0.4+esm2", "nodejs-dbgsym": "8.10.0~dfsg-2ubuntu0.4+esm2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libnode64-dbgsym": "10.19.0~dfsg-3ubuntu1.1", "libnode64": "10.19.0~dfsg-3ubuntu1.1", "nodejs-doc": "10.19.0~dfsg-3ubuntu1.1", "nodejs": "10.19.0~dfsg-3ubuntu1.1", "libnode-dev": "10.19.0~dfsg-3ubuntu1.1", "nodejs-dbgsym": "10.19.0~dfsg-3ubuntu1.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "nodejs-doc": "12.22.9~dfsg-1ubuntu3", "libnode72": "12.22.9~dfsg-1ubuntu3", "nodejs": "12.22.9~dfsg-1ubuntu3", "libnode-dev": "12.22.9~dfsg-1ubuntu3", "libnode72-dbgsym": "12.22.9~dfsg-1ubuntu3", "nodejs-dbgsym": "12.22.9~dfsg-1ubuntu3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libnode108": "18.13.0+dfsg1-1ubuntu2", "libnode108-dbgsym": "18.13.0+dfsg1-1ubuntu2", "nodejs": "18.13.0+dfsg1-1ubuntu2", "libnode-dev": "18.13.0+dfsg1-1ubuntu2", "nodejs-doc": "18.13.0+dfsg1-1ubuntu2", "nodejs-dbgsym": "18.13.0+dfsg1-1ubuntu2" } ] }