HIGHnpm
GHSA-jjhp-8crj-mppq· CVE-2026-61647@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
Modified: 9/22/2026
package
npm/@roomi-fields/notebooklm-mcp
pkg:npm/%40roomi-fields/notebooklm-mcp