medium2024-12-18 rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution GHSA-4fg7-vxc8-qx5w