ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References

More info at https://github.com/symfony/symfony/security/advisories/GHSA-gq53-v8w2-gjhj...