Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint (CVE-2026-10177) | HOL Guard CVE