vLLM: Speech-to-text upload size limit is enforced after full UploadFile read (CVE-2026-55646) | HOL Guard CVE