How I used o3 to find CVE-2025-37899, a remote zeroday vulnerabilitysimonwillison.net2 pointsthunderbonga year ago