Haarg Http::tiny vulnerabilities

• haarg http::tiny HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets CVE-2026-7017 Fix available 7.1 HighJuly 7, 2026
• haarg http::tiny HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values CVE-2026-7010 Fix available 6.5 MediumMay 11, 2026