CVE-2026-46683 Snappy: SSRF and local file read via the xsl-style-sheet option