CVE-2026-32141 flatted: Unbounded recursion DoS in parse() revive phase