HIGH8.8RubyGemsnpmGHSA-f78j-4w3g-4q65· CVE-2024-28121StimulusReflex arbitrary method callModified: 9/10/2026