Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false (CVE-2026-30912) | HOL Guard CVE