CVE-2026-33941: JavaScript Injection in Handlebars.js | NextGuard