Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines (CVE-2025-10998) | HOL Guard CVE