sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution (CVE-2026-16008) | HOL Guard CVE