CVE-2025-3406: nothings stb image.h – CVSS 6.5 · Watchpost