CVE-2026-55553: Cross Origin Redirect Options Reusecve-2026-55553-cross-origin-redirect-options-reuse
Request options and headers are reused across an HTTP redirect without checking whether the destination URL is cross-origin. Credential headers and authentication options should be stripped before following cross-origin redirects to prevent credential leakage.
