OnionShare follows symlinks in shared directories, allowing unintended disclosure of local files (CVE-2026-54706) | HOL Guard CVE