[Security-announce]Title: [CVE-2026-3446] Base64 decoding stops at first padded quad by default