`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator (CVE-2026-54655) | HOL Guard CVE