New comment by digitalagedragon on void-packages repository https://github.com/void-linux/void-packages/pull/30516#issuecomment-827681235 Comment: a-ha. This is a test for CVE-2020-8287, which was fixed in nodejs 10.23.1 by updating their vendored `http-parser` to the latest dev commit, but we're using system `http-parser` which is still at its latest official release. `nodejs` and `nodejs-lts` use `llhttp` instead, so they don't have this failure (though they do have _other_ HTTP-related failures on my box, probably because `llhttp` and `http-parser` aren't quite compatible enough). If this was just for `nodejs-lts-10` I would have half a mind to say "well the release is EOL in [literally 3 days](https://nodejs.org/en/about/releases/) so whatever" but there are half a dozen things that use `http-parser` so it probably makes sense to update it.