SSRF with API key leak in pretix-oppwa (CVE-2026-13603) | HOL Guard CVE