GHSA-pg8g-f2hf-x82m

src/infra/net/fetch-guard.ts

`fetchWithSsrFGuard` is the named component in the advisory, and its redirect-following logic is where cross-origin 307/308 replay behavior would preserve or drop request method, body, and headers.

src/infra/net/redirect-headers.ts

`fetch-guard.ts` imports cross-origin redirect header filtering from this neighboring file, so header retention or stripping across redirect hops is likely implemented here.