Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known (CVE-2026-47716) | HOL Guard CVE