CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects