vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router (CVE-2026-54236) | HOL Guard CVE