CVE-2026-54264: Cross Origin Sensitive Header Leakcve-2026-54264-cross-origin-sensitive-header-leak
Forwarding request headers directly to a new fetch or Request object without sanitizing sensitive headers (like 'Authorization' or 'Cookie') can cause a credential leak during cross-origin requests or redirects. Ensure you extract and sanitize headers if the destination origin differs from the source.
