Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
The llhttp parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS).
All versions before 2.1.4, all versions starting from 3.0.0 before 6.0.6
Upgrade to version 2.1.4, 6.0.6 or above.