HIGHnpmGHSA-7hgr-7h44-33w2CamoFox MCP: Unauthenticated HTTP MCP browser-control surfaceModified: 5/19/2026