CVE-2026-2109: jsbroks coco annotator – CVSS 8.1 · Watchpost