MEDIUM5.3npmGHSA-q6x5-8v7m-xcrf· CVE-2026-44288protobufjs has overlong UTF-8 decodingModified: 9/10/2026