Path traversal in NotebookRepo note and folder path composition (CVE-2026-44615) | HOL Guard CVE