CVE-2025-71459

The software Zipline through 4.3.2 is vulnerable to a path traversal vulnerability (CWE-22) via the x-zipline-filename header. Authenticated uploaders can supply traversal sequences to write files outside the intended upload directory. An attacker using a local datasource can create or overwrite ...