Patool < 4.0.5 Path Traversal via safe_extract() Function (CVE-2026-29509) | HOL Guard CVE