CVE-2026-1977: Code Injection in mcp-vegalite-server | NextGuard