Security Vulnerability - Action Required: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in your project

[Crispy-fried-chicken]

Hi,
I think your project may be vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in the function of ngx_http_lua_adjust_subrequest in the file modules/ngx_http_lua_module/src/ngx_http_lua_subrequest.c. It shares similarities to a recent CVE disclosure CVE-2020-11724 in the lua-nginx-module.

The source vulnerability information is as follows:

Vulnerability Detail:
CVE Identifier: CVE-2020-11724
Description: An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-11724
Patch: openresty/lua-nginx-module@9ab38e8

Would you help to check if this bug is true? If it's true, I'd like to open a PR for that if necessary. Thank you for your effort and patience!