HIGH7.8npmGHSA-wcx4-wpfv-mc5c· CVE-2026-15895jsii-diff: Command Injection via npm: package argumentModified: 8/7/2026