HIGHnpmGHSA-vp3h-ghgh-jr7g· CVE-2026-71476Nx: Zip-Slip in the self-hosted remote cacheModified: 8/6/2026