medium2026-11-13 CVE-2026-128079-envd: Host file disclosure through requirements path traversal and TOCTOU GHSA-jv6m-48w5-5rpr