Security fixes are provided for the latest published version of @hsblabs/http-command and @hsblabs/http-cli.

Report vulnerabilities through GitHub private vulnerability reporting. Do not open a public issue for an undisclosed vulnerability.

Include the affected package and version, reproduction steps, impact, and any known mitigation. We will acknowledge the report within seven days and coordinate disclosure after a fix is available.