MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement (CVE-2026-48512) | HOL Guard CVE