CVE-2026-23733: XSS/RCE in @lobehub/chat | NextGuard