plone.app.portlets: Denial of service via RSS feed portlet (CVE-2026-55248) | HOL Guard CVE