Mastodon: SSRF protection bypass on older Ruby versions (CVE-2026-47389) | HOL Guard CVE