jsPDF has HTML Injection in New Window paths (CVE-2026-31938) | HOL Guard CVE