vitali87 code-graph-rag

• CVE-2026-87008 High 7.1 Code Graph RAG structural tools follow out-of-root symlinks 0.3%
• CVE-2026-77604 High 7.5 Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read 0.4%