Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the IsSafeFileReference function. An attacker can access or disclose files outside the intended package boundary by supplying a crafted percent-encoded or multi-encoded file reference in the OpenAPI...