The llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). https://nvd.nist.gov/vuln/detail/CVE-2022-32214