sanic-cors contains an improper regular expression in the try_match() function (CVE-2026-37737) | HOL Guard CVE