@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass (CVE-2026-50168) | HOL Guard CVE