ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override (CVE-2026-44541) | HOL Guard CVE