Directory Traversal
diffoscope is vulnerable to Directory Traversal. The vulnerability is due to the trusted value of the gpg --use-embedded-filenames option,which can be exploited by an attacker to disclose contents of arbitrary files, such as ../.ssh/idrsa...