Dear list Safebreach just published an advisory on HTTP Response Splitting vulnerability in Node.js: http://info.safebreach.com/hubfs/Node-js-Response-Splitting.pdf The advisory is accompanied by a blog post: http://blog.safebreach.com/2016/02/09/http-response-splitting-in-node-js-root-cause-analysis/ Node.js has fixed versions ready to download, see: https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/ Thanks, -Amit
