CVE-2026-15022026-04-10CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.