credential-leak

• CVE-2026-6734 - undici Socks5ProxyAgent cross-origin pool confusion 2026-06-17
• CVE-2026-49853 - Tornado cross-origin redirect credential leak 2026-06-15