MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth (CVE-2026-48506) | HOL Guard CVE