CVE-2026-5602: Heim-mcp Command Injection - v0.1.0-0.1.3 | NextGuard