Spatie Laravel Media Library contains a server-side request forgery vulnerability (CVE-2026-48555) | HOL Guard CVE