NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead (CVE-2026-27889) | HOL Guard CVE