[GHSA] GHSA-7w2g-9mf9-324m (medium) — Hurl: Cookies in Cookies section leak when redirecting to a different host

GHSA-7w2g-9mf9-324m Severity: medium CVE: CVE-2026-63481

Hurl: Cookies in Cookies section leak when redirecting to a different host

## The Bug

Hurl <= 8.0.1 lets you define cookies two ways in a .hurl file:

1. As a raw Cookie: header in the [Header]/headers area 2. In a dedicated [Cookies] section (parsed into RequestSpec.cookies)

When following a redirect to a different host, Hurl correctly