Claw Orchestrator has inefficient regular expression complexity via validateRegex() (CVE-2026-10291) | HOL Guard CVE