medium2026-07-01 CVE-2026-49856-@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization GHSA-c5r6-m4mr-8q5j