Velocity.js has a Prototype Pollution vulnerability through #set path assignment (CVE-2026-44966) | HOL Guard CVE