Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service (CVE-2026-55078) | HOL Guard CVE