Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS (CVE-2026-52816) | HOL Guard CVE