backend 1 Command Injection – Remote Code Execution via rollOptions Parameter | Diceforge Apr 26, 2026