CVE-2026-24408: CSRF in sigstore-python OAuth Flow | NextGuard