Security vulnerability affects the cri-tools package. The HTTP client drops sensitive headers after following a cross-domain redirect.
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-HM31104.json"