Keycloak: Open redirect when using wildcard valid redirect URIs in Keycloak (CVE-2026-7504) | HOL Guard CVE