CVE-2026-48861: Missing Http Method Validation Crlfcve-2026-48861-missing-http-method-validation-crlf
HTTP method is merged into the request serialization list without prior validation. An attacker can pass malicious methods containing CRLF sequences to inject HTTP headers or smuggle requests. Ensure the given method string is validated to contain only allowed characters before constructing the payload.
