Angular i18n vulnerable to Cross-Site Scripting (XSS) (CVE-2026-27970) | HOL Guard CVE