aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges (CVE-2026-54276) | HOL Guard CVE