CVE-2026-25587: Prototype Pollution in @nyariv/sandboxjs | NextGuard