tarfile opened in streaming mode mishandles EOF (CVE-2026-11972) | HOL Guard CVE