CVE-2026-2108: jsbroks coco annotator – CVSS 7.5 · Watchpost