regclient may leak authentication credentials to external blob stores (CVE-2026-49349) | HOL Guard CVE