Wagtail has improper restriction handling on Documents and Images API (CVE-2026-44201) | HOL Guard CVE