CVE-2026-34043 Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects