CVE-2026-90588: zephyrproject zephyr: The HTTP client's debug helper print_header_field() in subsys/net/lib/http/http_client.c formatted an http_parser…

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...