Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename (CVE-2026-52792) | HOL Guard CVE