Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues.

Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing. This can lead to HTTP Request Smuggling as it is a non-standard interpretation of the header.

Read more...