nitrojs nitropack

• CVE-2026-44372 Medium 5.3 Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules 0.3%
• CVE-2026-44373 Medium 5.3 Nitro: Proxy scope bypass via percent-encoded path traversal in `routeRules` 0.5%