CVE-2025-27210 — Node.js HTTP request-smuggling

Node's HTTP parser accepted whitespace between Content-Length and its value, enabling request-smuggling attacks through intermediaries that parse the header strictly.