Add Langflow BaseFile fixed release reference

[cookesan]

Summary

• add the Langflow v1.9.2 release reference for the BaseFile TAR extraction advisory fixed version
• keep the NVD advisory reference for CVE-2026-55447

Validation

• confirmed the advisory aliases CVE-2026-55447 and affects the PyPI langflow package
• confirmed the advisory fixed version is 1.9.2 and references upstream PR #12945
• confirmed the v1.9.2 release URL and upstream PR URL return HTTP 200
• confirmed NVD returns CVE-2026-55447 with status Analyzed
• confirmed v1.9.1 lacks the TAR link, non-regular-member, and symlink-skip guards in BaseFileComponent
• confirmed v1.9.2 adds those BaseFileComponent TAR extraction guards
• confirmed the v1.9.1...v1.9.2 compare contains the upstream PR #12945 merge commit
• ran jq empty on the advisory JSON
• ran git diff --check