CVE-2026-34746: SSRF in Payload Node.js | NextGuard