Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows (CVE-2026-42305) | HOL Guard CVE