Use-after-free in the QPACK encoder of nginx HTTP/3 - CVE-2026-42530