brace-expansion: Zero-step sequence causes process hang and memory exhaustion (CVE-2026-33750) | HOL Guard CVE