bitbonsai mcpvault

• CVE-2026-57442 Medium 6.9 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested 0.2%
• CVE-2026-57441 High 8.4 MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence 0.2%