haris-musa excel-mcp-server

• CVE-2026-85661 Critical 9.8 excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode 0.7%
• CVE-2026-40576 Critical 9.4 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server 0.5%