python-engineio has possible denial of service due to maximum payload size sometimes not being enforced (CVE-2026-48809) | HOL Guard CVE