CVE-2026-3146: libvips libvips – CVSS 5.5 · Watchpost