Case-sensitive coding error leaves millions of Nuxt applications vulnerable to request smuggling