OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation (CVE-2026-45292) | HOL Guard CVE