CRITICAL 9.6 PyPI GHSA-hxpf-9xvq-wph8 netlicensing-mcp: REST Path Traversal Bypasses Token Redaction Modified: 6/18/2026