Headroom Labs Headroom

• CVE-2026-77776 Critical 9.1 Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity 0.6%
• CVE-2026-77775 High 8.6 Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation 0.6%