Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service (CVE-2026-55079) | HOL Guard CVE