CVE-2026-79538 | metatool-ai MetaMCP up to 2.4.22 MCP Inspector Proxy Endpoint server.ts createTransport code injection · Briflio