rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection (CVE-2026-35363) | HOL Guard CVE