Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVE-2026-0603) | HOL Guard CVE