CVE-2026-28422 Vim has stack-buffer-overflow in build_stl_str_hl()