CRITICAL9.8npmGHSA-9pcj-m5rr-p28g· CVE-2026-26831textract is vulnerable to OS Command InjectionModified: 3/31/2026