CVE-2026-92392: curl HTTP/2 upload Use-After-Free | Hacker News Reader