HIGH 7.6 PyPI GHSA-7h8w-hj9j-8rjw · CVE-2026-33718, PYSEC-2026-106 OpenHands is Vulnerable to Command Injection through its Git Diff Handler Modified: 6/8/2026