Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk (CVE-2026-12252) | HOL Guard CVE