protobufjs : Schema-derived names can shadow runtime-significant properties (CVE-2026-54269) | HOL Guard CVE