CVE-2025-48708: ghostscript can embed plaintext password in encrypted PDFs