swagger-typescript-api vulnerable to code injection via unescaped enum string values (CVE-2026-54664) | HOL Guard CVE