PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code (CVE-2026-16238) | HOL Guard CVE