PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option (CVE-2026-49359) | HOL Guard CVE