description: Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
problem types: Improper Input Validation (CWE-20)
affected:
{
product: https://github.com/nodejs/node
vendor: n/a
versions:
status: affected, version: 10.19.0, 12.15.0, 13.8.0
}