CVE-2026-39356: SQL Injection in drizzle-orm | NextGuard