CVE-2024-39338 — Axios protocol-confusion SSRF

A variant of the earlier axios SSRF (CVE-2024-39338) affecting later Node.js versions via protocol downgrade from https to http under specific redirect chains.