GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler (CVE-2026-47427) | HOL Guard CVE