CVE-2026-32778: libexpat project libexpat – CVSS 5.5 · Watchpost