EUVD-2026-36524

form-data: CRLF injection in form-data via unescaped multipart field names and filenames...