Spring Data: Unbounded property-path cache keyed by externally-supplied path string (CVE-2026-41695) | HOL Guard CVE