Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key (CVE-2026-53519) | HOL Guard CVE