Flawfinder output manipulation via untrusted filenames and source text (CVE-2026-48813) | HOL Guard CVE