Feast: resource exhaustion via websocket endpoint (CVE-2026-23538) | HOL Guard CVE