pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory (CVE-2026-8643) | HOL Guard CVE