Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter (CVE-2026-53504) | HOL Guard CVE