Fix Out of bounds read for cookie path (CVE-2025-9086) Fix predictable WebSocket mask (CVE-2025-10148)

Source: Fedora 42: curl Important CVE-2025-9086 Out of Bounds Read