hapijs wreck

• CVE-2026-48022 Medium 6.5 @hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects 0.2%
• CVE-2026-44979 Medium 6.3 @hapi/wreck : Sensitive `Proxy-Authorization` header leaked across cross-hostname redirects 0.4%