CVE-2026-4224 Stack overflow parsing XML with deeply nested DTD content models