Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning (CVE-2026-46342) | HOL Guard CVE