React Router: Potential CSRF via PUT/PATCH/DELETE document requests (CVE-2026-53663) | HOL Guard CVE