MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length (CVE-2026-48514) | HOL Guard CVE