Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock (CVE-2026-53715) | HOL Guard CVE