[HIGH] Header leakage on cross-domain redirects

PKSA-58fs-7xtr-x4q5 GHSA-w8gf-g2vq-j2f4

Affected version: >=4,<4.4.0

Reported by:
FriendsOfPHP/security-advisories, GitHub