Check whether the $_SERVER['REQUEST_*'] vars exist before using them

core/Middleware/TwoFactorMiddleware.php

lib/base.php

...e/AppFramework/Middleware/Security/SecurityMiddleware.php

lib/private/Route/Router.php