CVE ID:	CVE-2020-8287
Description:	Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2021.0121.1   1.3.6.1.4.1.25623.1.1.10.2022.0393   1.3.6.1.4.1.25623.1.1.4.2021.0224.1   1.3.6.1.4.1.25623.1.0.893224   1.3.6.1.4.1.25623.1.0.853695   1.3.6.1.4.1.25623.1.0.845474
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8287 Debian Security Information: DSA-4826 (Google Search) https://www.debian.org/security/2021/dsa-4826 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4I6MZNC7C7VIDQR267OL4TVCI3ZKAC4/ https://security.gentoo.org/glsa/202101-07 https://hackerone.com/reports/1002188 https://hackerone.com/reports/1002188 https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujan2021.html https://lists.debian.org/debian-lts-announce/2022/12/msg00009.html