Update SECURITY.md

Co-authored-by: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: mcollina

SECURITY.md

@@ -280,11 +280,9 @@ the community they pose.
 
 * Node.js treats data from remote network peers as untrusted, and bugs in
   parsers or protocol implementations may be security vulnerabilities.
-* Node.js may close HTTP/1.1 keep-alive connections when data is detected while
-  no request is outstanding, as described by RFC 9112 section 9.2. Reports that
-  rely solely on a malicious or compromised server racing unsolicited or
-  misordered responses within the same HTTP/1.1 connection reuse lifecycle are
-  generally not considered Node.js vulnerabilities.
+* Node.js treats data order from HTTP/1.1 keep-alive connections as trusted, meaning that a Node.js 
+  client consuming unsolicited or misordered responses within the same HTTP/1.1 connection
+  reuse lifecycle are generally not considered Node.js vulnerabilities.
 
 #### Malicious Third-Party Modules (CWE-1357)