EUVD-2026-31690

Hackney has CRLF / header injection in WebSocket upgrade request...