When Vitest UI server is listening, arbitrary file can be read and executed (CVE-2026-47429) | HOL Guard CVE