@angular/service-worker: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Worker (CVE-2026-54264) | HOL Guard CVE