Avinashbole Quip-mcp-server vulnerabilities

• avinashbole quip-mcp-server AvinashBole quip-mcp-server index.ts setupToolHandlers command injection CVE-2026-4192 5.3 MediumMarch 15, 2026