Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets (CVE-2026-47671) | HOL Guard CVE