Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p) (CVE-2026-50553) | HOL Guard CVE