guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator (CVE-2026-53723) | HOL Guard CVE