Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578) | HOL Guard CVE