CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion