high2026-10-23 CVE-2026-106763-@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions GHSA-2vq3-mpmf-9xgr