Apache Airflow: Airflow Variables were not masked in the UI for authenticated users (CVE-2026-54183) | HOL Guard CVE