CVE-2023-23916: HTTP multi-header compression denial of service