MEDIUM6.3npmGHSA-84fx-pwf3-7777· CVE-2026-2178xcode-mcp-server vulnerable to Command InjectionModified: 3/6/2026