Nitro has an Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules (CVE-2026-44372) | HOL Guard CVE