Fastify's connection header abuse enables stripping of proxy-added headers (CVE-2026-33805) | HOL Guard CVE