Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing (CVE-2026-49451) | HOL Guard CVE