phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access (CVE-2026-55599) | HOL Guard CVE