off-by-slash vs Trail of Bits Software Assurance (2026)