Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL (CVE-2026-41018) | HOL Guard CVE