One Character in an HTTP Header Just Bypassed Authentication on 325M Servers (medium.com)

This is quite a catastrophic security issue by just using a single character to bypass authentication.

And no-one cares.