fabiolb fabio

• CVE-2026-62987 Medium 5.8 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header 0.2%
• CVE-2025-48865 Critical 9.1 Fabio allows HTTP clients to manipulate custom headers it adds 0.5%