NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass (CVE-2026-2293) | HOL Guard CVE