CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018 | Hacker News Reader