Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id (CVE-2026-16536) | HOL Guard CVE