CVE-2024-37891 — urllib3 proxy-auth credential leak through redirects

urllib3 forwarded Proxy-Authorization headers on cross-origin redirects, leaking proxy credentials to attacker-controlled hosts.