HTTP Host Header Attacks 6 SSRF via flawed request parsing Apr 5, 2026 Host validation bypass via connection state attack Apr 4, 2026 Routing-based SSRF Apr 4, 2026 Web cache poisoning via ambiguous requests Apr 3, 2026 Host header authentication bypass Apr 2, 2026 Basic password reset poisoning Apr 1, 2026