cve-2024-27982 - Briefly

SVR.JS Blog

IMPORTANT! Update Node.JS to 18.20.1, 20.12.1, 21.7.2 or newer!

Older Node.JS versions had CVE-2024-27982 vulnerability with HTTP request smuggling potential.

Space before Content-Length header could allow attackers to smuggle in a second request. [ more ]