HIGH7.5npmGHSA-vf9j-h32g-2764· CVE-2025-54073mcp-package-docs vulnerable to command injection in several toolsModified: 2/4/2026