strawberry-graphql: Denial of Service via unbounded WebSocket subscriptions (CVE-2026-35526) | HOL Guard CVE