CVE-2026-44974: Custom Parser Missing Duplicate Key Checkcve-2026-44974-custom-parser-missing-duplicate-key-check
String parsing using `replace` assigning extracted keys to an object without checking for duplicate keys. This may allow parameter smuggling or injection if the parser receives duplicate keys (e.g., in HTTP headers). Validate that the key does not already exist before assignment.
