datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects (CVE-2026-54691) | HOL Guard CVE