CVE-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template