roomi-fields notebooklm-mcp

• CVE-2026-61647 High 7.1 @roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory 0.4%