CVE-2019-15606: nodejs: HTTP header values do not have trailing optional whitespace trimmed

Severity: Critical

CVSS Score: 9.8

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons