Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component (CVE-2026-55437) | HOL Guard CVE