Decidim: Admin user search allows SQL injection through similarity-based sorting (CVE-2026-45376) | HOL Guard CVE