Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect (CVE-2026-41715) | HOL Guard CVE