Bird-lg-go has a Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding (CVE-2026-45047) | HOL Guard CVE