Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing (CVE-2026-0990) | HOL Guard CVE