Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes (CVE-2026-46718) | HOL Guard CVE