NATS is vulnerable to pre-auth DoS through WebSockets client service (CVE-2026-33219) | HOL Guard CVE