AST-filtered eval() is not a sandbox: Severity 10 CVE-2026-26030, and others | Dark Hacker News