MEDIUM6.3npmGHSA-gc8w-x73w-p4rh· CVE-2026-7600yii2-mcp-server has a Command Injection IssueModified: 5/7/2026