CVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion