Vulnerabilities reported in req version 0.5

[youwillbe]

req 0.5.18 VULNERABLE!
  EEF-CVE-2026-49756 (LOW)
  aka: CVE-2026-49756, GHSA-px9f-whj3-246m
  Multipart form-data header injection in Req via unescaped name/filename/content_type
  https://osv.dev/vulnerability/EEF-CVE-2026-49756

  EEF-CVE-2026-49755 (HIGH)
  aka: CVE-2026-49755, GHSA-655f-mp8p-96gv
  Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies
  https://osv.dev/vulnerability/EEF-CVE-2026-49755