Directory Traversal

Overview wandb is an A CLI and library for interacting with the Weights and Biases API. Affected versions of this package are vulnerable to Directory Traversal in the File.download method of wandb/apis/public/files.py, which builds the destination with os.path.joinroot, self.name and never checks...